Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Avatar for Username

Kërkoni te Asistenca

Shmangni karremëzime gjoja asistence. S’do t’ju kërkojmë kurrë të bëni një thirrje apo të dërgoni tekst te një numër telefoni, apo të na jepni të dhëna personale. Ju lutemi, raportoni veprimtari të dyshimtë duke përdorur mundësinë “Raportoni Abuzim”.

Mësoni Më Tepër
Open

Policy clarification: embedding user-selected websites in an extension page

Firefox Zgjerime
jbr replied 3 javë më parë
michael818
michael818

Would Mozilla consider an exception to the security-header policy for an extension that embeds user-selected websites within its own locally packaged page?

The proposed behavior would remove X-Frame-Options and CSP frame-ancestors restrictions only for those embedded pages. Ordinary browsing and other CSP directives would remain unaffected.

Vivaldi’s persistent Web Panels provide a similar user experience, while Chrome’s declarativeNetRequest API provides the technical capability to modify framing headers. I understand these implementations differ, but I’d like to know whether Firefox offers an approved path to comparable functionality.

Would explicit user consent and per-site controls make this eligible for an exception? If not, is there a supported alternative or a way to request a private, pre-submission review?

Would Mozilla consider an exception to the security-header policy for an extension that embeds user-selected websites within its own locally packaged page? The proposed behavior would remove X-Frame-Options and CSP frame-ancestors restrictions only for those embedded pages. Ordinary browsing and other CSP directives would remain unaffected. Vivaldi’s persistent Web Panels provide a similar user experience, while Chrome’s declarativeNetRequest API provides the technical capability to modify framing headers. I understand these implementations differ, but I’d like to know whether Firefox offers an approved path to comparable functionality. Would explicit user consent and per-site controls make this eligible for an exception? If not, is there a supported alternative or a way to request a private, pre-submission review?

Krejt Përgjigjet (1)

jbr
jbr
  • 10 Kontribuesit Kryesues

You might wanna ask around in discourse.mozilla.org/c/add-ons/35

Bëni një pyetje

Duhet të bëni hyrjen te llogaria juaj që t’i përgjigjeni postimeve. Ju lutemi, filloni me një pyetje të re, nëse s’keni ende një llogari.