requesting permission on extension after gets installed in manifest version 3 #394
Unanswered
alirezaabdi01
asked this question in
Platform
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hello guys,
I have a question about requesting permission on extension when after installed in manifest version 3.
I have an extension that I want it to work only on a specific domain: "*://www.twitch.tv/*".
So in Firefox on manifest version 2, Easily you can put the domain in content_scripts.matches and my extension work only on the domain that I talked about. But in manifest v3, Firefox read this domain as an Optional permission and don't give the permission automatically.
I was thinking about that when my extension gets installed, I request for permission but it looks like request permission confirm dialog only opens when user clicks something.
To be honest with you I don't think this thing that user should click something so I can request permission with confirm dialog is not necessary. The confirm dialog is enough. But here is a thing. I tested something with this extension:
https://github.com/mdn/webextensions-examples/tree/main/dnr-dynamic-with-options
There is a security hole in Firefox that extensions can spam request permission confirm dialog even when user clicks on deny in confirm dialog. Watch this gif:
In my opinion, after user denies this request, it should put something in "Permissions" tab in the extension settings that user denied this permission request or at be a design like the design of requesting permission in android like in first time and couple of times.
Also after I give permission to my domain it doesn't show anything in "Permissions" tab in the extension settings that I gave this permission to the extension.
I want to request that if you can remove this thing that user should click something so I can request permission with confirm dialog after my extension gets installed and fix the other things that I talked about.
Cheers
Beta Was this translation helpful? Give feedback.
All reactions