Default exceptions are double-listed in the Permissions Window for Add-ons Installation Exceptions

[coffeebreak]

• Open PM 28.0.0a2 with a brand new profile.
• Preferences > Security > Check the box to be warned if sites try to install add-ons.
• Click the "Exceptions" button to open the window: The default exceptions are double-listed.
  (They're not double-listed in the corresponding about:config setting).

exts-allowedSites-UI.png

xpinstall-aboutconfig-default.png

xpinstall-aboutconfig2.png

[SpockFan02]

I notice each domain is listed under both http and https protocols. What is the intended behavior?

[coffeebreak]

I notice each domain is listed under both http and https protocols.

Oops! I didn't notice that. Much embarrassed.

Presumably it's intended...?

[JustOff]

Presumably it's intended...?

I think this is not, and xpinstall.whitelist.add should be initialized with the https only exceptions.

[Moonchild]

You need separate entries for http and https in UXP.
Whether we should add both versions by default may be debatable... but it's not a bug in the browser when not specifying a scheme.

[JustOff]

But do we need to include non https sites to the exceptions?