Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

In Google Chrome, I can go to chrome://extensions/ and click "permissions" to view the permissions that an installed extension has been granted. I cannot find an equivalent in Firefox. Is there such a resource? . In Firefox, about:permissions has per-site permissions, which is a great resource but I need per-extension permissions. Firefox version = 23.0.1

share|improve this question
add comment

2 Answers

up vote 5 down vote accepted

Read this document. Relevant excerpt (page 3):

The Firefox platform has no mechanisms to restrict the privileges of add-ons. The add-on code is fully trusted by Firefox. The installation of malicious add-ons can result in full system compromise. There is no security measure to restrict the intercommunication between add-ons. As a result an add-on can alter or modify another add-on in the background. There is no security policy or sandboxing ability of XPConnect and XPCOM components which is a serious flaw in the security model. Firefox does not have any type of restrictions on malformed Cross Origin Resource Sharing and socket creation. Some exploitable vulnerabilities are platform independent.

So there is no way to show per add-on permissions because there are no permissions to show. In the Firefox security model, each add-on is roughly equivalent to a piece of native code, which can, by definition, do whatever it wants. This is similar to the situation with signed Java applets.

share|improve this answer
    
wow. great document. If it is current, the situation is worse than I thought. –  mcgyver5 Aug 26 '13 at 17:46
add comment

Try about:permissions if you have at least Firefox 6 (if not, update NOW!)

share|improve this answer
    
as I said in the post, about:permissions only has site permissions and not extension permissions. –  mcgyver5 Aug 26 '13 at 17:31
    
yeah, I don't think there is a way to see extension permissions. –  Rod MacPherson Aug 26 '13 at 17:33
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.