2 ms·
relevant links all the bugzilla items: https://bugzilla.mozilla.org/buglist.cgi?bug_status=UNCONFIRMED&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&b
by aweirljslfj 3y ago
relevant links
all the bugzilla items: https://bugzilla.mozilla.org/buglist.cgi?bug_status=UNCONFIRMED&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&bug_status=RESOLVED&bug_status=VERIFIED&bug_status=CLOSED&f1=classification&short_desc_type=anywordssubstr&query_format=advanced&j2=OR&f2=OP&short_desc=quarantined%20domains&o1=notequals&f3=CP&v1=Graveyard https://bugzilla.mozilla.org/buglist.cgi?bug_status=UNCONFIR...
if you have access to their project tracking, it's under WEBEXT-1351 (would love if someone can post the entire reasoning for the feature here, as their conversations are now behind login which i didn't bother to secure)
The code for what the user can see/allow per-domain https://hg.mozilla.org/mozilla-central/rev/4399291987d9 https://hg.mozilla.org/mozilla-central/rev/4399291987d9 (not released as far as i can tell) you can see the file locally via `resource://gre/modules/ExtensionPermissions.sys.mjs` in your address bar.
and lastly, the dev doc on how to push those values to live user browsers https://firefox-source-docs.mozilla.org/toolkit/mozapps/extensions/addon-manager/AMRemoteSettings-overview.html https://firefox-source-docs.mozilla.org/toolkit/mozapps/exte...
this is already how it works on Firefox for android, with NO USER WHITELIST OPTION... the only workaround on android is to add another hidden setting that points to a user-defined collection in addons.mozilla.org, which will be the allowed extension list instead of mozilla's.
edit; HOLY SHIT!!! just updated firefox for android, and they removed access to about:config there in the last version! (ps: they had already removed since 2020 for "regular lowly users" who do not install experimental version, their words. Now it is also removed from f-droid stable build since last version. I didn't see it mentioned on the release notes, so they either strong armed the maintainer or slipped changes past them)
- mutant 3y agoI noticed this on Android a while ago, and bailed on FF. Their trajectory feels so anti-user, I was like "welp, figure out how to live in a chromium world where I know I'm under constant attack"