ReporterX wrote:Is it a modified xpi? If so, yes PM me.
I don't know how to patch a diff to the xpi.
An XPI is just a zip file which has an install.rdf file on the top level of the archive, so in order to apply the diff, you would
1) extract the XPI (rename to .zip if needed) into its own directory
2) apply the diff to the files (I just do this step manually

)
3) in the directory with install.rdf, select all, compress the selection as .zip, then change the .zip filename extension to .xpi
To install, drag&drop your XPI onto the browser window.
If you don't have an archive manager on your system, I've had good experience with
7-Zip, though it can be a little slow sometimes.
If any of that sounds too complicated for you, I can try to PM you a modified XPI, but that's a bit of a pain for me.
ReporterX wrote:barbaz wrote:That is actually "resource://pdf.js" so even though it doesn't show up as Allowed in the menu, it is. No need to Allow it.
Yes the PDF still loads without the permission.
But one issue now - it keeps asking me every time I open a PDF. It seems strange to set it as untrusted.
I think there is no harm to set it as allowed too (like in terms of potential security risks

). Am I right?
Don't set it as Untrusted as that will place additional restrictions on it that may take precedence over the whitelisted status and thus mess up the addon.
It won't hurt to Allow it unless you somehow access a site like "http://www.pdf.js/" and it's malicious...
(I haven't seen such a site yet, but I've never tried to type that in / go there)