full-address-column icon indicating copy to clipboard operation
full-address-column copied to clipboard

Published 20 hours ago • verified publisher icon lkosson

Security change to manifest.json

Open nxnlvz opened this issue 3 years ago • 1 comments

Only request what is required.

nxnlvz avatar Dec 27 '21 18:12 nxnlvz

I don't think that changes anything. The addon uses experiment_apis which implicitly grants full access permission. I believe there is no way to read full message headers and modify message list pane using built-in APIs with fine-grained permissions. Even with just messagesRead, Thunderbird shows the addon has full access to local computer.

lkosson avatar Dec 27 '21 21:12 lkosson

Not applicable after changes in Thunderbird 115

lkosson avatar Jun 11 '24 12:06 lkosson