Confirmed users, Bureaucrats and Sysops emeriti
3,599
edits
No edit summary |
|||
| Line 144: | Line 144: | ||
* ''any other business?'' | * ''any other business?'' | ||
* I'd like to add Extension Manager UI update to the feature list. This is badly needed to properly support locales, blocklisting, dependencies, and extension update. [[User:Robert Strong|Robert Strong]] | * I'd like to add Extension Manager UI update to the feature list. This is badly needed to properly support locales, blocklisting, dependencies, and extension update. [[User:Robert Strong|Robert Strong]] | ||
* dveditz: we've been seeing malware attacks which are installing malicious extensions or convincing users to do that. I'm not sure that the extension blocklisting is going to work to prevent these malicious extensions, as they can just change their own GUIDs or install to the application directory. | |||
** the whitelist is equally problematic in that once a known domain is on it, everyone can spoof that domain | |||
** darin: I was speaking with fritz about this today | |||
** '''action:''' dveditz to pull together a meeting to talk about this (him, rob_strong, security group, drivers, anyone from bon echo that's interested) | |||