Default permissions Topic is solved

Talk about code development, features, specific bugs, enhancements, patches, and similar things.
Forum rules
Please keep everything here strictly on-topic.
This board is meant for Pale Moon source code development related subjects only like code snippets, patches, specific bugs, git, the repositories, etc.

This is not for tech support! Please do not post tech support questions in the "Development" board!
Please make sure not to use this board for support questions. Please post issues with specific websites, extensions, etc. in the relevant boards for those topics.

Please keep things on-topic as this forum will be used for reference for Pale Moon development. Expect topics that aren't relevant as such to be moved or deleted.
User avatar
wannabegeek101
Hobby Astronomer
Hobby Astronomer
Posts: 22
Joined: 2021-07-17, 06:29

Default permissions

Unread post by wannabegeek101 » 2021-07-18, 09:33

Why is the default permission for all sites to allow "install[ing] extensions or themes"? This seems like a major security oversight, if websites can, by default, install whatever they want onto the user's browser!
Kind regards,
Last edited by wannabegeek101 on 2021-07-18, 11:17, edited 1 time in total.

New Tobin Paradigm

Re: Default permissions

Unread post by New Tobin Paradigm » 2021-07-18, 10:22

Nothing can be installed without direct user interaction.

User avatar
wannabegeek101
Hobby Astronomer
Hobby Astronomer
Posts: 22
Joined: 2021-07-17, 06:29

Re: Default permissions

Unread post by wannabegeek101 » 2021-07-18, 10:31

About:permissions indicates otherwise
Screenshot 2021-07-18 202918.jpg

vannilla
Moon Magic practitioner
Moon Magic practitioner
Posts: 2181
Joined: 2018-05-05, 13:29

Re: Default permissions

Unread post by vannilla » 2021-07-18, 10:37

That doesn't mean it won't ask for user action first.

User avatar
wannabegeek101
Hobby Astronomer
Hobby Astronomer
Posts: 22
Joined: 2021-07-17, 06:29

Re: Default permissions

Unread post by wannabegeek101 » 2021-07-18, 10:42

My bad, I thought that "always ask" meant it would ask for permission first, for example:
Screenshot 2021-07-18 202918.jpg
but maybe it's different with extensions?

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35402
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: Default permissions

Unread post by Moonchild » 2021-07-18, 10:48

"Always ask" means that before the installation process is started (where you still have to confirm installation of the extensions), it asks you if you want to allow a certain website to install extensions. This was considered unnecessary double confirmation that would just feed into the infamous dialog confirmation fatigue present in software (resulting in people never reading what they allow) so the default setting is "don't ask", as in, don't bug the user with extra confirmations if they decide to install extensions from non-official sources.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

Locked