Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expand Security section of web_accessible_resources #5186

Merged

Conversation

Rob--W
Copy link
Member

@Rob--W Rob--W commented May 21, 2021

Added https://bugzilla.mozilla.org/show_bug.cgi?id=1694679 to the release notes of Firefox 89.

And expanded documentation to warn about the security risks of using the web_accessible_resources feature and refer to more documentation about security considerations. A concrete example of the fallout of failing to adhere to these recommendations can be found at https://bugzilla.mozilla.org/show_bug.cgi?id=1711361 .

@Rob--W Rob--W added the Content:WebExt WebExtensions docs label May 21, 2021
@Rob--W Rob--W requested review from a team as code owners May 21, 2021 10:46
@Rob--W Rob--W requested review from chrisdavidmills and removed request for a team May 21, 2021 10:46
@Rob--W Rob--W force-pushed the webext-web_accessible_resources-cors branch from ea3e479 to 11a2260 Compare May 21, 2021 10:47
@github-actions
Copy link
Contributor

github-actions bot commented May 21, 2021

@Rob--W
Copy link
Member Author

Rob--W commented May 21, 2021

Force-pushed a new version of the PR because I previously added the new note to 79 instead of 89.

Once merged it should be visible at https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/89

Copy link
Contributor

@chrisdavidmills chrisdavidmills left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM; thanks @Rob--W

@chrisdavidmills chrisdavidmills merged commit 25b5c24 into mdn:main May 21, 2021
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Aug 11, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Content:WebExt WebExtensions docs
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants