session-alive icon indicating copy to clipboard operation
session-alive copied to clipboard

Requires too many permissions

Open Narvey opened this issue 1 year ago • 1 comments

This extension requires the omnipotent "Access your data for all websites" permission which shouldn't be needed simply for refreshing pages and is, quite frankly, the biggest security issue with the entire FireFox addons system. If Session Alive could remove the requirement for this permission, it could make it easier for the users to trust it.

Narvey avatar Mar 30 '23 19:03 Narvey

From the extension page:

Permissions Requested Access your data for all websites : required to inject a JavaScript code to all the webpages which is activated only when a rule is running. Access browser tabs : required to access the browser tab where the rule is running. Display notifications to you : required to display Browser Notifications with the status of the running rule.

Access your data for all websites is required; otherwise I have to mention which websites it is allowed to run (which is not possible) or just Active Tab (which will make this extension of no use)

However, in Chrome you have the option in the extension page to select the websites, which is missing in Firefox websites

arunelias avatar Jan 19 '24 14:01 arunelias