Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

There's a built-in extension blocklist which also gets updated remotely.

https://hg.mozilla.org/mozilla-central/file/tip/browser/app/...



More on the policy for said blocklist: https://wiki.mozilla.org/Blocklisting (2008-11) https://support.mozilla.org/en-US/kb/add-ons-cause-issues-ar... (2012) https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/AMO... (2019)

The expansion from "we block malicious add-on versions" to "we block add-ons with known stability or security issues" to "we err on the side of security" does not bode well for the future of hacking cool add-ons.


What about a fork that only differs in allowing a second more permissive addon store.


Settings change over time and maintaing any fork is hard. Maintaining a fork of a modern browser is a sisyphian task. Even compiling it is no joke.


This is more what I’m concerned about. Does this only affect mainline FF or dev/nightly as well?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: