Benjol

Feedback from Mozilla review > Due to both security and performance reasons, innerHTML (or similar method e.g. insertAdjacentHTML, JQuery append/prepend/appendTo/html/before/after/insertBefore/insertAfter) should not be set using dynamic values. This can lead...

Feedback from Mozilla review: > You are using version 1.16 of the Add-on SDK, which is outdated. Please upgrade to version 1.17 and repack your add-on

I haven't got the faintest idea if/how this would be possible, but just throwing the idea in here for discussion. I think I've got free minutes on Azure/VS-online, but this...

Mozilla review: creating DOM nodes from HTML strings

2

(1.2 from #37) > Your add-on creates DOM nodes from HTML strings containing unsanitized data, by assigning to innerHTML or through similar means. Aside from being inefficient, this is a...

(1.1 From #37) > We don't allow add-ons to use remote scripts because they create serious security vulnerabilities. We also need to review all of your add-on code, and this...

Each command could be self-documenting

4

I created the /help command, but it's not really help, it just shows a list of commands. I'm not sure how feasible it is, but it _would_ be nice from...

Of course, this implies actually managing some kind of version numbers :) https://gist.github.com/874058 (Note to self: try to get round to actually doing it myself)