3 ms·

To this sentiment – does anyone have a good way of auditing Firefox extensions for security? I find really useful extensions on https://addons.mozilla.org http

To this sentiment – does anyone have a good way of auditing Firefox extensions for security? I find really useful extensions on https://addons.mozilla.org https://addons.mozilla.org ... but they often require permission to look at all of my browsing data, and I haven't found a way to view the canonical source that will be installed. I'm sure it's available somewhere on the file system, but is there an easier way?

mhio 4y ago
Firefox Addon installs are just a link to a zip file containing html, css and Javascript. Using ublock origin as an example this is currently: https://addons.mozilla.org/firefox/downloads/file/4003969/ublock_origin-1.44.4.xpi Right click the "Add to Firefox" button, "Save Link As" and open with something that supports zip files. My take from watching some open source extensions is you are relatively safe from properly nasty things with a popular extension as they receive a higher "weighting" in the review process. Releases tend to get held up when something strange is added. Mozilla also document their process and tools (they have a web UI for it all): https://wiki.mozilla.org/Add-ons/Reviewers/Guide/Reviewing https://wiki.mozilla.org/Add-ons/Reviewers/Guide/Reviewing https://youtu.be/0yLfVcuXb04 https://youtu.be/0yLfVcuXb04