4 ms·
Note that this addon requires the "Access your data for all websites" permission[0], which means: > The extension can read the content of any web page you visi
by asymmetric 5y ago
Note that this addon requires the "Access your data for all websites" permission[0], which means:
> The extension can read the content of any web page you visit as well as data you enter into those web pages, such as usernames and passwords.
I'm sure the devs are super trustworthy, but there have been cases of legitimate extensions falling in the wrong hands, and this, coupled with automatic extension updates, could be a big security hole in your setup.
[0]: https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions?as=u&utm_source=inproduct#w_access-your-data-for-all-websites https://support.mozilla.org/en-US/kb/permission-request-mess...
PS: Ironically, the link above has utm elements.
- drexlspivey 5y agoWhy is this permission needed? Aren't browser permissions granular enough to only give it access to the url?
- tim1994 5y agoAFAIK it is not possible to get access to only the URL. I think the "tabs" permission triggers the "Access your data for all websites" warning. The "tabs" permission is required to get a tabs URL and change it. Discussion about ClearURLs permissions: https://gitlab.com/KevinRoebert/ClearUrls/-/issues/159 https://gitlab.com/KevinRoebert/ClearUrls/-/issues/159 Extension permissions: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/manifest.json/permissions https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...