Skip to content

Commit

Permalink
Update beta115.rst
Browse files Browse the repository at this point in the history
  • Loading branch information
jobisoft committed Jun 20, 2023
1 parent 5ecff68 commit cb27686
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion changes/beta115.rst
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
Changes in Thunderbird 115
==========================

Introduce an additional ``sensitiveDataUpload`` permission, which allows to by-pass human review, but prompts the user for the following permission: *Transfer sensitive user data (if access has been granted) to a remote server for further processing.*
WebExtension usually are not reviewed when submitted but instead are made available instantly. The WebExtension permission system should guard against malicious actors. However, the data available to extension is very sensitive and if a user granted access to messages and contacts he mostly assumes the data is only used locally. Extensions however, can unknowingly send this data to remote servers. We therefore started to enforce review of all extensions, which request sensitive permissions like ``messagesRead`` or ``addressBook``. We also introduce an additional ``sensitiveDataUpload`` permission, which allows to by-pass this human review, but prompts the user for the following permission: *Transfer sensitive user data (if access has been granted) to a remote server for further processing.*

If an add-on is not requesting that permission, but a reviewer concludes that it is indeed sending data to a remote server not under the control of the user, the reviewer may request the permission to be added.

Expand Down

0 comments on commit cb27686

Please sign in to comment.