Comments (6)
Modern WebExtensions API doesn't provide access to browser's restricted pages (about:…, chrome://…) and to browser itself. :(
So, this is limitation of all modern extensions.
Only possible to enable on some restricted http/https pages like addons.mozilla.org, in about:config:
privacy.resistFingerprinting.block_mozAddonManager = true
extensions.webextensions.restrictedDomains = "" (empty string, or remove some domains from list)
from right_links_we.
I've updated list of WE-version limitations:
https://github.com/Infocatcher/Right_Links_WE#issues
from right_links_we.
That's a shame, but not your fault. Thank you for your prompt response, I have incorporated your suggestions.
from right_links_we.
@Infocatcher I always leave those 2 settings as defaults, because I do not currently fully understand all the security implications of changing them. The biggest risk seems to be an installed rogue extension to which the user has given the "Access all websites" permission. It could then modify those restricted pages and trick a user into downloading more malware. But, honestly, if they already have rogue code running and it has access to all non-restricted web pages, their browser is completely compromised already. Do you happen to understand all the risks involved? Not that I'm going to change those settings, but it would be good to learn the details if you know them.
from right_links_we.
With online banking & Co there is too many things to stole even without tricking restricted pages like AMO.
Personally I still prefer flexibility over potential risks…
I think, the most important part about secure extensions – is something like manual review, and this part is now skipped in favor of some automated tests during uploading to AMO and signing.
And this one is too hard to implement: a lot of code, a lot of changes to review them all.
And at least should be trusted (and not hacked…) author. And also trusted reviewers.
Anyway, is still good to just look for user reviews. Brain is the better antivirus. :)
from right_links_we.
Related Issues (20)
- Blob option for images HOT 4
- Can you develop a Google Chrome extension. HOT 1
- Cursor arrow changes to a hand on long click but doesn't revert to arrow
- 0.5b8 does not work on FF 69 Nigthly and FF 68Bx HOT 4
- The addon will not work after the browser starts and has to be re-enabled.
- how enable longrightclick > contextmenu HOT 1
- not functioning inside RSS View
- 0.5b9 broken on FF 70.0b9 HOT 3
- Right Links для хромиумных браузеров
- Simple resquest: Open in discarded tab HOT 2
- Bug: New tab opens in wrong window [MacOS]
- Links opening twice HOT 2
- Right Links WE stopped working HOT 10
- Strange new tabs open HOT 1
- double-click
- Right Links WE writing a surprising amount of data to its local storage database
- Extension for Chrome and Chrome based browsers??
- Window focus issue
- Not working for bookmarks
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from right_links_we.