#908450 webext-bulk-media-downloader: reports extension installation and version to add0n.com from new profiles #908450
- Package:
- webext-bulk-media-downloader
- Source:
- bulk-media-downloader
- Submitter:
- Paul Wise
- Date:
- 2021-09-22 04:36:34 UTC
- Severity:
- normal
When I start Firefox with a new profile, the extension opens a tab that submits an unencrypted HTTP GET request to add0n.com with the add-on name and version number, example URL below. This is a privacy issue unless the user also uses the -offline option when starting Firefox. The correct solution is either to ship the information to be conveyed to the user with the package itself (like Privacy Badger does) or to ask the user if they would like to load the remote page (only for information that must be updated separately to the package). Looking at the source code, it also loads the add0n.com website when the add-on is upgraded or removed (URLs below). $ firefox -profile $(mktemp -d tmp-firefox-profile-XXXXXXXXXX) http://add0n.com/media-tools.html?version=0.2.1&type=install http://add0n.com/media-tools.html?version=0.2.1&type=upgrade http://add0n.com/feedback.html?name=Bulk%20Media%20Downloader&version=0.2.1
Hello, Good morning, We have gone through your samples from a partner and Here is our Order List. Please do bear in mind that we are very much in need of this order, quote your competitive prices. Kindly send the Order confirmation. Your early reply will be much appreciated. Best Regards, Maryanah Erwin. PT FINDORA INTERNUSA Jln Pahlawan 66 Kec. Arjawinangun 45162 CIREBON West-Java INDONESIA tel : +62 231 357334 fax: +62 231 357260 email: marketing@findora.com