Privileged Sites

General discussion about the NoScript extension for Firefox
Post Reply
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Privileged Sites

Post by therube »

Privileged Sites (rant)

I trust addons.mozilla.org - unequivocally :rolleyes:.
It is a "privileged" site, I good with that :D.

I'm so trusting. They're privileged & I'm happy :dancing:.

AMO would never get hacked.
[add any site in the world] would never get hacked.

Anyhow, one day I'm trolling AMO & well, the boat just left the harbor.
I fire up wirefoxshark & damn if I don't see somebadasssite.com being loaded from addons.mozilla.org.

But I'm trusty (the clown) & they're privileged, so I'm good with that.

And we're supposed to be accepting of this?
Here we are, with a security tool, yet this security tool cannot secure us from addons.mozilla.org - because they're "privileged"!
Well you know what that is.


Anyhow, even though NoScript cannot affect "privileged" sites, can it still at least list the domains it is finding there?
That way, once addons.mozilla.org gets hacked, at the least, we can see that somebadasssite.com is also being loaded there.
As it is currently, we have no clue what sites are loading there.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:52.0) Gecko/20100101 SeaMonkey/2.49.4
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Privileged Sites

Post by Giorgio Maone »

I'm afraid there's no way for any non-Mozilla WebExtension to "see" anything on AMO.
Even hacking extensions.webextensions.restrictedDomains, which seems to work for other sites in the list, has no effect there, sorry.
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: Privileged Sites

Post by barbaz »

Are you saying this doesn't work anymore? - https://forums.informaction.com/viewtop ... 010#p97010
*Always* check the changelogs BEFORE updating that important software!
-
Post Reply