Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#50308 - [firefox] Disable extension signature requirement
Attached to Project:
Arch Linux
Opened by Steven (Stebalien) - Sunday, 07 August 2016, 21:44 GMT
Last edited by Doug Newgard (Scimmia) - Sunday, 07 August 2016, 21:49 GMT
Opened by Steven (Stebalien) - Sunday, 07 August 2016, 21:44 GMT
Last edited by Doug Newgard (Scimmia) - Sunday, 07 August 2016, 21:49 GMT
|
DetailsPlease revert the hard extension signing requirement (but leave the about:config xpinstall.signatures.required option on by default).
It, 1. Makes it impossible to develop extensions on non-developer versions of Firefox (the developer version is not available in the repos). 2. Primarily exists to prevent Windows applications from disabling `xpinstall.signatures.required` and then side-loading a malicious extension. 3. Makes my blood boil. I use Arch because I don't like software telling me what I can and cannot do. Arch users can already trivially break/compromise their systems if they do something stupid so this feature doesn't actually add any useful security. I would normally just add Firefox to my list of applications to recompile myself. Unfortunately, it takes a very long time, a lot of scratch space, and a lot of memory to compile (I've never actually successfully compiled Firefox on my laptop due to these issues). |
This task depends upon
Closed by Doug Newgard (Scimmia)
Sunday, 07 August 2016, 21:49 GMT
Reason for closing: Duplicate
Additional comments about closing: FS#45900
Sunday, 07 August 2016, 21:49 GMT
Reason for closing: Duplicate
Additional comments about closing: