Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WebExtensions are inadequate to handle all http requests #28

Closed
tumpio opened this issue Jul 13, 2017 · 3 comments
Closed

WebExtensions are inadequate to handle all http requests #28

tumpio opened this issue Jul 13, 2017 · 3 comments

Comments

@tumpio
Copy link
Owner

tumpio commented Jul 13, 2017

"Some sensitive requests" are unable to be controlled by WebExtensions by API design. These requests are silently ignored without any exception nor warning.

List of bugs:
https://bugzilla.mozilla.org/show_bug.cgi?id=1380729
https://bugzilla.mozilla.org/show_bug.cgi?id=1380739
https://bugzilla.mozilla.org/show_bug.cgi?id=1334918
https://bugzilla.mozilla.org/show_bug.cgi?id=1330590

Related information:
https://www.ghacks.net/2017/07/13/privacy-blunder-firefox-getaddons-page-google-analytics/

@tumpio tumpio changed the title WebExtensions are unable to handle restricted http requests WebExtensions are inadequate to handle all http requests Jul 13, 2017
@tumpio
Copy link
Owner Author

tumpio commented Jul 16, 2017

🙃

@tumpio tumpio closed this as completed Jul 16, 2017
@Atavic
Copy link

Atavic commented Jul 16, 2017

Setting up a local proxy may be one last resort. I also think that the User Agent string customization will have hard times with webextensions.

@tumpio
Copy link
Owner Author

tumpio commented Jul 18, 2017

There is currently small set of privileged hosts, which are ignored by webRequest API. These may be controllable in future with an explicit permission.

addons.mozilla.org
discovery.addons.mozilla.org
testpilot.firefox.com

In addition to these any Firefox "system principal" request ("any request made by Firefox for itself") is out of the scope of webRequest API.

Repository owner locked and limited conversation to collaborators Jul 23, 2017
@tumpio tumpio removed the help wanted label Jan 6, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants