Why is the default permission for all sites to allow "install[ing] extensions or themes"? This seems like a major security oversight, if websites can, by default, install whatever they want onto the user's browser!
Kind regards,
Default permissions Topic is solved
Forum rules
Please keep everything here strictly on-topic.
This board is meant for Pale Moon source code development related subjects only like code snippets, patches, specific bugs, git, the repositories, etc.
This is not for tech support! Please do not post tech support questions in the "Development" board!
Please make sure not to use this board for support questions. Please post issues with specific websites, extensions, etc. in the relevant boards for those topics.
Please keep things on-topic as this forum will be used for reference for Pale Moon development. Expect topics that aren't relevant as such to be moved or deleted.
Please keep everything here strictly on-topic.
This board is meant for Pale Moon source code development related subjects only like code snippets, patches, specific bugs, git, the repositories, etc.
This is not for tech support! Please do not post tech support questions in the "Development" board!
Please make sure not to use this board for support questions. Please post issues with specific websites, extensions, etc. in the relevant boards for those topics.
Please keep things on-topic as this forum will be used for reference for Pale Moon development. Expect topics that aren't relevant as such to be moved or deleted.
-
- Hobby Astronomer
- Posts: 22
- Joined: 2021-07-17, 06:29
Default permissions
Last edited by wannabegeek101 on 2021-07-18, 11:17, edited 1 time in total.
Re: Default permissions
Nothing can be installed without direct user interaction.
-
- Hobby Astronomer
- Posts: 22
- Joined: 2021-07-17, 06:29
Re: Default permissions
About:permissions indicates otherwise
You do not have the required permissions to view the files attached to this post.
-
- Moon Magic practitioner
- Posts: 2194
- Joined: 2018-05-05, 13:29
Re: Default permissions
That doesn't mean it won't ask for user action first.
-
- Hobby Astronomer
- Posts: 22
- Joined: 2021-07-17, 06:29
Re: Default permissions
My bad, I thought that "always ask" meant it would ask for permission first, for example:
but maybe it's different with extensions?You do not have the required permissions to view the files attached to this post.
-
- Pale Moon guru
- Posts: 35647
- Joined: 2011-08-28, 17:27
- Location: Motala, SE
Re: Default permissions
"Always ask" means that before the installation process is started (where you still have to confirm installation of the extensions), it asks you if you want to allow a certain website to install extensions. This was considered unnecessary double confirmation that would just feed into the infamous dialog confirmation fatigue present in software (resulting in people never reading what they allow) so the default setting is "don't ask", as in, don't bug the user with extra confirmations if they decide to install extensions from non-official sources.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite