Extension Manager:Security Review: Difference between revisions

Line 144: Line 144:
'' What failure modes or decision points are presented to the user?''
'' What failure modes or decision points are presented to the user?''


The main failure presented to user is that of a failure to install an add-on which can happen for a variety of reasons (corrupt/invalid file, invalid application etc).
When a user installs an add-on without a secure update path then they are presented with an error dialog informing them of the failure.


Most other failures are hidden from the user, failure during automatic attempts to check for updates are not shown.
Most other failures are hidden from the user, failures during automatic attempts to check for updates are not shown.


'' Can its files be corrupted by failures? Does it clean up any locks/files after crashes?''
'' Can its files be corrupted by failures? Does it clean up any locks/files after crashes?''


This is possible, {{Bug|396695}} is the main instance that users are experiencing. Generally the add-ons manager tries to operate safely even being able to rollback installs/uninstalls of add-ons in the event that the operation cannot complete successfully.
There is nothing new introduced that will corrupt the extension managers state files.


== l10n and a11y ==
== l10n and a11y ==
canmove, Confirmed users
1,570

edits