Page 1 of 1
This is a privileged page, ...
Posted: Thu May 17, 2018 6:05 pm
by palme
Hi when i open the website
addons.mozilla.org and want to change permissions for this site i get "This is a privileged page, whose permissions cannot be configured." when i open noscript.
Why is this text displayed? Mozilla used google analytics for example already on it's website.
Re: This is a privileged page, ...
Posted: Thu May 17, 2018 6:16 pm
by therube
Certain sites are verboten; like mozilla.org.
Re: This is a privileged page, ...
Posted: Thu May 17, 2018 6:20 pm
by palme
therube wrote:Certain sites are verboten; like mozilla.org.
it seems addons.mozilla.org is affected but not mozilla.org
And which sites are defined as privileged, is there somewhere a list?
Why doesn't the user have the possibility to disable this privileged page "feature"
someone that manages to exploit a bug in the addons.mozilla.org domain and upload malicious scripts can afterwards include this script in every page and noscript won't block it?
i miss the good old noscript that included ABE and didn't define privileged pages that can't be disabled
Re: This is a privileged page, ...
Posted: Thu May 17, 2018 7:11 pm
by barbaz
palme wrote:And which sites are defined as privileged, is there somewhere a list?
I think it's this -
https://dxr.mozilla.org/mozilla-central ... API.cpp#46
palme wrote:Why doesn't the user have the possibility to disable this privileged page "feature"
You do: about:config > set privacy.resistFingerprinting.block_mozAddonManager to true
(If that pref isn't listed, you need to create it: right-click > New > Boolean)
Re: This is a privileged page, ...
Posted: Thu May 17, 2018 8:27 pm
by palme
barbaz wrote:palme wrote:And which sites are defined as privileged, is there somewhere a list?
I think it's this -
https://dxr.mozilla.org/mozilla-central ... API.cpp#46
palme wrote:Why doesn't the user have the possibility to disable this privileged page "feature"
You do: about:config > set privacy.resistFingerprinting.block_mozAddonManager to true
(If that pref isn't listed, you need to create it: right-click > New > Boolean)
setting
privacy.resistFingerprinting.block_mozAddonManager to
true and clearing
extensions.webextensions.restrictedDomains disabled the "privileged page" stuff with ff60
thanks
and guess what - they use google analytics on
https://addons.mozilla.org/en-US/firefox/ - unbelievable how intrusive and shady firefox got over the years