Extension doesn't work in "tiles/Top page". about right_links_we HOT 6 OPEN

Modern WebExtensions API doesn't provide access to browser's restricted pages (about:…, chrome://…) and to browser itself. :(
So, this is limitation of all modern extensions.

Only possible to enable on some restricted http/https pages like addons.mozilla.org, in about:config:
privacy.resistFingerprinting.block_mozAddonManager = true
extensions.webextensions.restrictedDomains = "" (empty string, or remove some domains from list)

from right_links_we.

I've updated list of WE-version limitations:
https://github.com/Infocatcher/Right_Links_WE#issues

from right_links_we.

That's a shame, but not your fault. Thank you for your prompt response, I have incorporated your suggestions.

from right_links_we.

@Infocatcher I always leave those 2 settings as defaults, because I do not currently fully understand all the security implications of changing them. The biggest risk seems to be an installed rogue extension to which the user has given the "Access all websites" permission. It could then modify those restricted pages and trick a user into downloading more malware. But, honestly, if they already have rogue code running and it has access to all non-restricted web pages, their browser is completely compromised already. Do you happen to understand all the risks involved? Not that I'm going to change those settings, but it would be good to learn the details if you know them.

from right_links_we.

With online banking & Co there is too many things to stole even without tricking restricted pages like AMO.
Personally I still prefer flexibility over potential risks…

I think, the most important part about secure extensions – is something like manual review, and this part is now skipped in favor of some automated tests during uploading to AMO and signing.
And this one is too hard to implement: a lot of code, a lot of changes to review them all.
And at least should be trusted (and not hacked…) author. And also trusted reviewers.
Anyway, is still good to just look for user reviews. Brain is the better antivirus. :)

from right_links_we.