nostalgy-xpi
nostalgy-xpi copied to clipboard
Unnecessary permissions are a blocker
I started to install this, but then it requested:
Have full, unrestricted access to Thunderbird, and your computer
I don't install anything that asks for more than it needs, so unfortunately I had to abort :(
I'd love to use this if you ever update to the modern permission API.
If you have used the old Nostalgy in the past - there is no change in the permissions.
It is just that TB never told you in the past. All addons upto TB 68 always had unrestricted access to your PC. They always could start processes or save files. The file could have beed a virus in your autostart folder. While abuse has been caught for FF, I never read of any for TB. But you are right, technically, it was (and is) possible. If you use LibreOffice, upon saving a file, it could additionally save a virus into your autostart. So to a certain extend, a lot of software has full access to your PC, and trust is needed (or open source, where people can look at the source code).
So I fully appreciate your concerns. In the old addon system, there is no way to have limited permissions.
Unfortunately, the new apis do not (yet) allow to do what Nostalgy(++) does.
Klaus