Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Mozilla websites privileges

  • 3 replies
  • 0 have this problem
  • 8 views
  • Last reply by Terry

more options

<quote> Note that extensions do not work on mozilla.org pages for security reason as Mozilla websites have advanced privileges like accessing all files on your computer and running special JavaScript. </quote>

Why does Mozilla need to acess all files? Can we disable this 'feature'?

<quote> Note that extensions do not work on mozilla.org pages for security reason as Mozilla websites have advanced privileges like accessing all files on your computer and running special JavaScript. </quote> Why does Mozilla need to acess all files? Can we disable this 'feature'?

All Replies (3)

more options

I don't think Mozilla sites have special techniques to access all files on your computer. That might have been a typo.

Here are some examples of elevated privileges that Mozilla pages have, and which add-ons therefore are blocked from manipulating:

(1) Support site

This site gives the option to extract configuration data from your Firefox including your add-ons and selected preferences. Normal websites are not allowed to access this data. Beyond using it to identify/fingerprint you, I don't know if there are other risks.

(2) Add-ons site

The Add-ons site can extract your extensions list and allowing enabling disabled ones or removing enabled ones (you'll notice this when the button changes on the page for an installed add-on). Normal websites are not allowed to access this data or make such changes. I don't know what else the site allows.

(Probably the Firefox Account site would be very risky to expose to add-ons, but I haven't looked into what it does.)

more options

sclaes said

Why does Mozilla need to access all files? Can we disable this 'feature'?

Examples of what you're talking about would help your case.

more options

See https://support.mozilla.org/hsb/questions/1306789

Only remove the domains you wish to remove.

Modified by Terry