Opened 12 months ago

Closed 12 months ago

Last modified 12 months ago

#25018 closed defect (duplicate)

Block downloading of add-ons from mozilla or any websites.

Reported by: cypherpunks Owned by: tbb-team
Priority: High Milestone:
Component: Applications/Tor Browser Version:
Severity: Critical Keywords:
Cc: Actual Points:
Parent ID: #25000 Points:
Reviewer: Sponsor:

Description

  1. Block download of XPI files.
  2. Remove "add from file" menu from about:add-on.
Because maybe the user wants something that isn't supposed to be allowed by default.

In a sense that is like arguing that Noscript shouldn't by default block scripts, "break" pages and require the user to do something to view other people's webpages.
Is that sensible?

I mean I hope there is a workaround for you to get what you want, but acting like a browser-bundle focused around security is completely "off base" in enforcing that (for instance) unknown things don't get to write to a file/filesystem in that manner is maybe a bit "demanding".

Child Tickets

Change History (8)

comment:1 Changed 12 months ago by cypherpunks

This is for a NEW TOR USER who tried Tor Browser for the FIRST TIME.

They will disappointed like me if they learned latest WebExts didn't work on your browser
BUT on Firefox ESR.

I want you to block any XPI files from installing or downloading.

If you continue to break things, there are lots of 1-star review voted by Tor Browser users.

comment:2 Changed 12 months ago by cypherpunks

Resolution: duplicate
Status: newclosed

I'm 100% sure this is a duplicate, go find the ticket as I'm too lazy to do so.

comment:3 Changed 12 months ago by cypherpunks

Resolution: duplicate
Status: closedreopened

Unless you can provide the ID you can't say 100%.

comment:4 in reply to:  3 Changed 12 months ago by cypherpunks

Resolution: duplicate
Status: reopenedclosed

Replying to cypherpunks:

Unless you can provide the ID you can't say 100%.

That's false obviously.

comment:5 Changed 12 months ago by cypherpunks

OK, I did the work for you: #14924, #21983. Can you pay me now? Here's my BTC address: 1EjLT5YRYLnMkkHF2G9SLiRmzjC8FhTu7e

Last edited 12 months ago by cypherpunks (previous) (diff)

comment:6 Changed 12 months ago by cypherpunks

Resolution: duplicate
Status: closedreopened

comment:7 Changed 12 months ago by cypherpunks

Resolution: duplicate
Status: reopenedclosed

Stop vandalizing my comments which pointed out the duplicates and pay the toil in BTCs.

comment:8 Changed 12 months ago by cypherpunks

Note: See TracTickets for help on using tickets.