When you install an extension into Firefox, you may be presented with a message similar to this one:
This is an extension asking your permission to tap into Firefox’s inner framework (via APIs) to alter your browser’s behavior. These APIs might ask to read or write data you enter in webpages, read data from or access features on your computer, or alter the settings in your browser. If you don't see one of these messages, that means the extension won't try to access any of your data or change the settings in your browser.
So you can better understand what these messages mean in terms of practical impact on your browsing experience and your data, this article provides details about each of the messages.
(You're also encouraged to check out Tips for assessing the safety of an extension for further guidance on evaluating extensions.)
Access your data for all websitesThe extension could read the content of any web page you visit, as well as data you enter into those web pages, such as usernames and passwords.
Extensions requesting this permission might:
The extension could read the content of web pages you visit in the specified domain, as well as data you enter into those web pages, such as usernames and passwords.
Extensions requesting this permission might:
Used in conjunction with the named domain message (above) when the extension is requesting access to five or more domains; the first three are listed and the other domain requests counted.
Access your data for a specific siteThe extension could read the content of any web pages you visit at the specified website, as well as any data you enter into those web pages, such as usernames and passwords.
Extensions requesting this permission might:
Used in conjunction with the named website message (above) when the extension is requesting access to five or more websites – the first three are listed and the other website requests counted.
Read and modify bookmarksThe extension could create, modify or remove bookmarks, or change the folder structure in which bookmarks are stored.
Extensions requesting this permission might:
The extension could do one or more of the following:
Extensions requesting this permission might offer enhanced features to clean up your browsing history.
The extension could clear any or all of:
The extension could retrieve data from the clipboard: The equivalent of “paste”.
Extensions requesting this permission might:
The extension could write data to the clipboard: The equivalent of “copy” or “cut”.
Extensions requesting this permission might add content to the clipboard, so you can use it elsewhere in your browser or computer.
The extension could add a new panel to the developer tools and will be given access to all data in all tabs.
Extensions requesting this permission will usually deliver new developer tools. However, some ordinary extensions use the developer tools to provide additional diagnostic or informational features. One example is Adblock Plus, which provides a feature in developer tools where you can see details of the ads and content it’s blocking.
Download files and read and modify the browser’s download historyThe extension could save a file from the web or one created in the extension using the browser’s download manager. The extension could also access and update details of downloaded files stored in the download manager.
Note: The extension has to obey the settings in the download manager, putting you in control of where the files are saved.
Extensions requesting this permission might:
The extension could request that the application on your computer that handles files of a specific type opens a downloaded file. For example, if you have Microsoft Word installed on your computer, the extension could request it to open files with “.docx”.
Extensions requesting this permission might:
The extension could perform a search of the text content of any tab.
Extensions requesting this permission might provide an enhanced “find” feature.
Access your locationThe extension could obtain your location from your computer, GPS, the location associated with your IP address or some other method.
Extensions requesting this permission might:
The extension could do one of the following with your browser history:
Extensions requesting this permission might:
The extension could:
Extensions requesting this permission might:
The extension could send messages to and receive them from a complementary native app on your computer.
The complementary app needs to be installed on your computer independently of the extension. This usually happens in one of two ways:
Please note that Mozilla has not vetted or reviewed the complementary app. You should approach the installation of the complementary app with the same caution you would apply when installing any third party software from the internet.
Extensions requesting this permission might:
The extension could issue notifications through the standard notification system offered by your computer’s operating systems.
Extensions requesting this permission might:
The extension could access software on your computer for generating and validating security keys and certificates using the PKCS #11 standard. (Note the extension can't install the PKCS #11 software on your computer; you’ll be prompted to install the software separately.)
Extensions requesting this permission might:
The extension could change privacy related settings controlling:
Extensions requesting this permission might:
The extension could direct some or all of your web browsing traffic to another computer (a proxy) on the internet.
Extensions requesting this permission might:
The extension could access a list of recently closed windows and tabs, reopen those tabs and windows, and remove details of these tabs and windows from the lists.
Extensions requesting this permission might:
The extension could obtain the URL, title, and icon from any tab.
Extensions requesting this permission might:
The extension could store an unlimited amount of data using your browser’s data storage features.
Extensions requesting this permission might:
The extension could listen for the steps the browser takes to navigate from a link to another page. The extension could then provide new features for the content on the page.
Extensions requesting this permission might:
The site permission extension enables a website to communicate with MIDI devices and send and receive SysEx data. SysEx data is arbitrary, often specific to a particular device model or manufacturer. Websites granted this permission can tamper with the device. While there are many legitimate use-cases for SysEx messages, a malicious website could corrupt the device's memory. The consequences of malicious action range from losing all the data stored in the device to rendering the device useless by overwriting the device’s program memory.
Extensions requesting this permission might:
You can manage which extensions are active in private browsing by selecting the Run in Private Windows checkbox when granting a new extension permissions on your device. For more information, see Extensions in Private Browsing.
The extension could enable unverified scripts to access your website data, on websites that the extension can access.
Unverified scripts can pose security and privacy risks, such as running harmful code or tracking website activity. Only run scripts from extensions or sources you trust.
These fine people helped write this article:
AliceWyman,
Chris Ilias,
Tonnes,
Mozinet,
Joni,
Andreas Wagner,
Paul,
sdevaney,
Angela Lazar,
PGGWriter,
Ілля,
igulow,
Bithiah,
Denys,
Rob Wu,
Lucas Siebert,
BD,
William Durand VolunteerGrow and share your expertise with others. Answer questions and improve our knowledge base.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.3