We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Buscar en Ayuda

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Add-on Permission in detail

  • 3 respuestas
  • 1 tiene este problema
  • 1 visita
  • Última respuesta de wmchung9

more options

Hi, I am a bit of a panaroid person, so regarding to the permission: "access my data for all websites", does that means an add-on has the ability to make input in the background by itself? For example, whether an add-on is able to control my account on a website, changing the settings, password, and etc?

Hi, I am a bit of a panaroid person, so regarding to the permission: "access my data for all websites", does that means an add-on has the ability to make input in the background by itself? For example, whether an add-on is able to control my account on a website, changing the settings, password, and etc?
Capturas de pantalla adjuntas

Modificadas por wmchung9 el

Solución elegida

Eddie said

Hi, I am a bit of a panaroid person, so regarding to the permission: "access my data for all websites", does that means an add-on has the ability to make input in the background by itself? For example, whether an add-on is able to control my account on a website, changing the settings, password, and etc?

In theory, it's possible, if you are logged in to the site and the site's forms can be manipulated by a script. Many sites have protections against scripts taking high-risk actions, or require additional verification for those actions.

If you want to browse critical sites without your extensions being active, you could use a private window for those sites and make sure the extensions do not have permission to run in private windows. See: Extensions in Private Browsing.

Leer esta respuesta en su contexto 👍 1

Todas las respuestas (3)

more options

The developer explains the purpose behind each required permission here. https://github.com/gorhill/uBlock/wiki/Permissions

  • Access your data on all web sites
  • Since first version.
  • - To be able to inspect all net requests so that they can be cancelled if needed.
  • - Only on http- and https-based URL addresses.
more options

Solución elegida

Eddie said

Hi, I am a bit of a panaroid person, so regarding to the permission: "access my data for all websites", does that means an add-on has the ability to make input in the background by itself? For example, whether an add-on is able to control my account on a website, changing the settings, password, and etc?

In theory, it's possible, if you are logged in to the site and the site's forms can be manipulated by a script. Many sites have protections against scripts taking high-risk actions, or require additional verification for those actions.

If you want to browse critical sites without your extensions being active, you could use a private window for those sites and make sure the extensions do not have permission to run in private windows. See: Extensions in Private Browsing.

more options

jscher2000 said

Eddie said

Hi, I am a bit of a panaroid person, so regarding to the permission: "access my data for all websites", does that means an add-on has the ability to make input in the background by itself? For example, whether an add-on is able to control my account on a website, changing the settings, password, and etc?

In theory, it's possible, if you are logged in to the site and the site's forms can be manipulated by a script. Many sites have protections against scripts taking high-risk actions, or require additional verification for those actions.

If you want to browse critical sites without your extensions being active, you could use a private window for those sites and make sure the extensions do not have permission to run in private windows. See: Extensions in Private Browsing.

Got it, so if I want to be safe, I can turn off the extension when logging into my accounts, thanks!