dontbugme icon indicating copy to clipboard operation
dontbugme copied to clipboard

Permission

Open vertigo220 opened this issue 1 year ago • 1 comments

The AMO page for this states

This extension needs the following permissions:

  • "http://bugmenot.com/view/*"(=> "Read and change you data on bugmenot.com") to get credentials for the current site from BugMeNot
  • "activeTab/tabs"(=> "Access browser tabs") to insert login credentials into your current page.

but in the sidebar it says

This add-on needs to:

Access your data for all websites

These two statements are obviously at odds with each other, and I'm curious what's going on. I would suspect the sidebar is the correct one, since I'm guessing AMO simply looks at the manifest to determine the permissions requested, and that the statement in the description is out of date. If that's the case, why does this need access to all websites, when the Better BugMeNot addon only needs access to the BugMeNot site?

vertigo220 avatar Sep 09 '22 01:09 vertigo220

It looks like during the migration to Plasmo in DontBugMe 3 I accidentally left the unspecific wildcard for accessing all pages in place:

v2: https://github.com/vantezzen/dontbugme/blob/c9e3b0d16e534a360ca7c905feb354686c1e36e4/src/manifest-v2.json#L17-L20

v3: https://github.com/vantezzen/dontbugme/blob/73065336ddba33a00a92d461fbda942ead8bd2c4/package.json#L37-L43

I'll look into fixing this in with next version

vantezzen avatar Sep 12 '22 06:09 vantezzen