On why Iceweasel-UXP doesn't include WebExtensions.

General discussion and chat (archived)
Locked
Latitude
Banned user
Banned user
Posts: 597
Joined: 2016-03-21, 18:28

On why Iceweasel-UXP doesn't include WebExtensions.

Post by Latitude » 2018-07-18, 14:18

It is because of privacy reasons.

I really don't understand what the relation between WebExtensions addons with privacy problems is.

Could somebody explains to me what it is?

User avatar
Nigaikaze
Board Warrior
Board Warrior
Posts: 1146
Joined: 2014-02-02, 22:15
Location: Chicago, IL, USA

Re: On why Iceweasel-UXP doesn't include WebExtensions.

Post by Nigaikaze » 2018-07-18, 14:38

Latitude wrote:Could somebody explains to me what it is?
According to this ...

https://issues.hyperbola.info/index.php ... 1042&dev=4

... they say it is due to this "known critical privacy bug in Firefox":

https://bugzilla.mozilla.org/show_bug.cgi?id=1372288
Nichi nichi kore ko jitsu = Every day is a good day.

Latitude
Banned user
Banned user
Posts: 597
Joined: 2016-03-21, 18:28

Re: On why Iceweasel-UXP doesn't include WebExtensions.

Post by Latitude » 2018-07-18, 14:59

Nigaikaze wrote:
Latitude wrote:Could somebody explains to me what it is?
According to this ...

https://issues.hyperbola.info/index.php ... 1042&dev=4

... they say it is due to this "known critical privacy bug in Firefox":

https://bugzilla.mozilla.org/show_bug.cgi?id=1372288
Has it been fixed in Basilisk?
Last edited by Latitude on 2018-07-18, 14:59, edited 1 time in total.

User avatar
therube
Board Warrior
Board Warrior
Posts: 1363
Joined: 2018-06-08, 17:02

Re: On why Iceweasel-UXP doesn't include WebExtensions.

Post by therube » 2018-07-18, 15:16

Regardless of "privacy", PM (& UXP [these names always get me confused]) won't be supporting webextensions at all, in any case. Isn't that right?

User avatar
Isengrim
Board Warrior
Board Warrior
Posts: 1296
Joined: 2015-09-08, 22:54
Location: 127.0.0.1
Contact:

Re: On why Iceweasel-UXP doesn't include WebExtensions.

Post by Isengrim » 2018-07-18, 15:26

therube wrote:Regardless of "privacy", PM (& UXP [these names always get me confused]) won't be supporting webextensions at all, in any case. Isn't that right?
The UXP platform support for WebExtensions is experimental at best. Individual applications built upon the platform may (Basilisk) or may not (Pale Moon, Iceweasel-UXP) choose to include that support.
Last edited by Isengrim on 2018-07-18, 15:27, edited 1 time in total.
a.k.a. Ascrod
Linux Mint 19.3 Cinnamon (64-bit), Debian Bullseye (64-bit), Windows 7 (64-bit)
"As long as there is someone who will appreciate the work involved in the creation, the effort is time well spent." ~ Tetsuzou Kamadani, Cave Story

User avatar
therube
Board Warrior
Board Warrior
Posts: 1363
Joined: 2018-06-08, 17:02

Re: On why Iceweasel-UXP doesn't include WebExtensions.

Post by therube » 2018-07-18, 15:27

I guess I should ask, is Iceweasel-UXP "Basilisk", in which case, I suppose webextensions are possible though frowned upon & not necessarily expected to work or be supported (viewtopic.php?p=144956#p144956).

User avatar
Nigaikaze
Board Warrior
Board Warrior
Posts: 1146
Joined: 2014-02-02, 22:15
Location: Chicago, IL, USA

Re: On why Iceweasel-UXP doesn't include WebExtensions.

Post by Nigaikaze » 2018-07-18, 15:34

therube wrote:I guess I should ask, is Iceweasel-UXP "Basilisk" ....
You'll probably get a better/faster answer if you ask the Hyperbola folks.
Nichi nichi kore ko jitsu = Every day is a good day.

User avatar
Nigaikaze
Board Warrior
Board Warrior
Posts: 1146
Joined: 2014-02-02, 22:15
Location: Chicago, IL, USA

Re: On why Iceweasel-UXP doesn't include WebExtensions.

Post by Nigaikaze » 2018-07-18, 15:37

therube wrote:PM (& UXP [these names always get me confused]) won't be supporting webextensions at all, in any case. Isn't that right?
UXP = kind of supports WebExtensions (as Isengrim says, experimental support at best).
PM = does not and will not support WebExtensions.
Nichi nichi kore ko jitsu = Every day is a good day.

User avatar
Isengrim
Board Warrior
Board Warrior
Posts: 1296
Joined: 2015-09-08, 22:54
Location: 127.0.0.1
Contact:

Re: On why Iceweasel-UXP doesn't include WebExtensions.

Post by Isengrim » 2018-07-18, 15:43

According to this, it is a rebranded and modified Basilisk.
a.k.a. Ascrod
Linux Mint 19.3 Cinnamon (64-bit), Debian Bullseye (64-bit), Windows 7 (64-bit)
"As long as there is someone who will appreciate the work involved in the creation, the effort is time well spent." ~ Tetsuzou Kamadani, Cave Story

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 28495
Joined: 2011-08-28, 17:27
Location: Tranås, SE
Contact:

Re: On why Iceweasel-UXP doesn't include WebExtensions.

Post by Moonchild » 2018-07-18, 16:21

It exposes one of the multiple hacks Mozilla has used to make WE work in the first place, and maybe even a fundamental flaw in how WebExtensions work, overall (I haven't had time to fully analyze the problem yet). Since it's at the very root of the implementation of WEs and how they interact with web content, I also don't see a straightforward way around that problem.

The issue is that in an effort to hide the fact that a certain extension is installed by randomizing access URLs, that randomized nature creates a unique fingerprint for content to read. So you're in effect going from "this user has extension X installed, it could be user Y or anyone else we've seen with this extension" to "this is user Y". As you can understand, that's a problem ;) -- since the WE needs to know its own random ID so it can access its resources from page content, that ID can't change once it's been established.

Aside from this privacy issue, our continued experimental support in Basilisk depends on how much of a problem our limited implementation (restricting WEs to only content-related functions and not exposing many browser-specific APIs, because that is what we have our other extension types for) poses. Time will tell.
"Son, in life you do not fight battles because you expect to win, you fight them merely because they need to be fought." -- Snagglepuss
Image

Locked