InformAction Forums

Nice, been doing this for a long time already as I use 56 as my daily driver and even then I simultaneously need to run two different profiles at times. On top of that I have ESR and Quantum on the system for Java and testing respectively and I keep them out of each other's hair and without crossove...

So in conclusion the only way to be sure that by using an add-on you're running only free open software is to check: its license that all files in its XPI are source files and not binary files every last line of its source code, because in one line it can fetch proprietary unknown code and execute ...

I refer you to what @barbaz so elegantly stated.

If a page is not granted `ALLOWED` then scripts do not run, that could be first-party or third-party the distinction is SCRIPT so are you sure you don't have the site itself or as part of a domain wildcard allowed scripting permission? Do you have an actual link where this happens so we can test it?...

That makes it really tricky to know if by using an add-on you're running closed source code, doesn't it? You can't even tell by looking at the add-on's license! How can a layman tell if an add-on makes use of closed source code? Is it enough to just look at the file extensions inside the XPI? If th...

Agreed, when I read it I thought the same thing, but wasn't sure if maybe I misunderstood, thank you for handling it.

Thanks GµårÐïåñ for the feedback, but I'm not clear whether you're saying this can't be reliably killed by user.js? More than likely as Giorgio said, it will be controllable by a option/setting and certainly can be as such neutered using a `user.js` file but the fact is that the subset of the popul...

This kind of thing has always backfired, they would be better off partnering with and supporting open initiatives like OpenDNS instead. While COMODO still does their "secure dns", it backfired for them long ago and they stopped making it default, but now just give options for it in their services, w...

WebExtensions do not expose their settings in the about:config anymore, they are placed inside IndexDB structure, and as such you won't see them in the browser. Using a db viewer is an option but not always reliable, and could actually end up corrupting the extension's data or even cause the browser...

Do you have an adblocker? Most of them have filters that will break that, NoScript can only detect what is present.

The references to aolcdn.com are due to sites that are "owned" by them and will always pull from them, no account is needed with them and doesn't mean you are using their services. I am still not sure what the problem is to be honest.

Can't be sure but likely it is coming from an ad on a page you are viewing that is triggering the connect. Also, if you have prefetch enabled, it will often start pulling links on the page in the background even if you are not visiting or planning to visit it, you can disable that. Without more on h...

You say an add-on may rely on proprietary code or libraries, but where could they be located in the Mozilla ecosystem? XPI files are open source, as is Firefox. Must any proprietary code then be openly released in an XPI file and only licensed under a proprietary license in order for it to be able ...

... I was just hoping to find some answers, because I haven't found any resources that would explain this in a way that non-developers would understand. ... If anyone understands this better or knows of any resources that would shed some more light on it I'd be grateful to know. Thank you :D My ent...