Page 1 of 1

This is a privileged page, ...

Posted: Thu May 17, 2018 6:05 pm
by palme
Hi when i open the website

addons.mozilla.org and want to change permissions for this site i get "This is a privileged page, whose permissions cannot be configured." when i open noscript.

Why is this text displayed? Mozilla used google analytics for example already on it's website.

Re: This is a privileged page, ...

Posted: Thu May 17, 2018 6:16 pm
by therube
Certain sites are verboten; like mozilla.org.

Re: This is a privileged page, ...

Posted: Thu May 17, 2018 6:20 pm
by palme
therube wrote:Certain sites are verboten; like mozilla.org.
it seems addons.mozilla.org is affected but not mozilla.org

And which sites are defined as privileged, is there somewhere a list?
Why doesn't the user have the possibility to disable this privileged page "feature"

someone that manages to exploit a bug in the addons.mozilla.org domain and upload malicious scripts can afterwards include this script in every page and noscript won't block it?

i miss the good old noscript that included ABE and didn't define privileged pages that can't be disabled

Re: This is a privileged page, ...

Posted: Thu May 17, 2018 7:11 pm
by barbaz
palme wrote:And which sites are defined as privileged, is there somewhere a list?
I think it's this - https://dxr.mozilla.org/mozilla-central ... API.cpp#46
palme wrote:Why doesn't the user have the possibility to disable this privileged page "feature"
You do: about:config > set privacy.resistFingerprinting.block_mozAddonManager to true
(If that pref isn't listed, you need to create it: right-click > New > Boolean)

Re: This is a privileged page, ...

Posted: Thu May 17, 2018 8:27 pm
by palme
barbaz wrote:
palme wrote:And which sites are defined as privileged, is there somewhere a list?
I think it's this - https://dxr.mozilla.org/mozilla-central ... API.cpp#46
palme wrote:Why doesn't the user have the possibility to disable this privileged page "feature"
You do: about:config > set privacy.resistFingerprinting.block_mozAddonManager to true
(If that pref isn't listed, you need to create it: right-click > New > Boolean)
setting privacy.resistFingerprinting.block_mozAddonManager to true and clearing extensions.webextensions.restrictedDomains disabled the "privileged page" stuff with ff60

thanks

and guess what - they use google analytics on https://addons.mozilla.org/en-US/firefox/ :( - unbelievable how intrusive and shady firefox got over the years