dontbugme
dontbugme copied to clipboard
Permission
The AMO page for this states
This extension needs the following permissions:
- "http://bugmenot.com/view/*"(=> "Read and change you data on bugmenot.com") to get credentials for the current site from BugMeNot
- "activeTab/tabs"(=> "Access browser tabs") to insert login credentials into your current page.
but in the sidebar it says
This add-on needs to:
Access your data for all websites
These two statements are obviously at odds with each other, and I'm curious what's going on. I would suspect the sidebar is the correct one, since I'm guessing AMO simply looks at the manifest to determine the permissions requested, and that the statement in the description is out of date. If that's the case, why does this need access to all websites, when the Better BugMeNot addon only needs access to the BugMeNot site?
It looks like during the migration to Plasmo in DontBugMe 3 I accidentally left the unspecific wildcard for accessing all pages in place:
v2: https://github.com/vantezzen/dontbugme/blob/c9e3b0d16e534a360ca7c905feb354686c1e36e4/src/manifest-v2.json#L17-L20
v3: https://github.com/vantezzen/dontbugme/blob/73065336ddba33a00a92d461fbda942ead8bd2c4/package.json#L37-L43
I'll look into fixing this in with next version