editor icon indicating copy to clipboard operation
editor copied to clipboard

Firefox addon can not install

Open massongit opened this issue 3 years ago • 5 comments

I can not install firefox addon because https://addons.mozilla.org/ja/firefox/addon/textlint-editor/ is 404.

massongit avatar Feb 27 '22 14:02 massongit

textlint editor for Firefox was rejected by following reason.

Remotely executing code is not permitted in any form, including using Web Workers as a sandbox.

Current textlint editor require to install worker script as remtely executing code. It is similar with Greasemonkey-like extensions, I think. https://addons.mozilla.org/ja/firefox/addon/tampermonkey/ https://addons.mozilla.org/ja/firefox/addon/greasemonkey/ This extension show dialog before installing the worker script for avoiding malcious script. Also, the script is exectuted in WebWorker. the worker script can not access webextension APIs/ContentScript APIs.

But, Firefox disallow to use this approch because this is remotely executing code.


If we will re-publish textlint editor, we need to bundle textlint scripts into this extension. It means that the extension user can not install own script. Instead of it, the extension user select rule from built-in rules.

This approch is similar with https://chrome.google.com/webstore/detail/textlint-proofreader/hdongmdneapmhfblomidbafplpanpdmm?hl=ja https://github.com/io-monad/textlint-chrome-extension

azu avatar Feb 28 '22 12:02 azu

If you take a long time to resolve it, I think you can remove the Firefox add-on URL from README.md .

massongit avatar Feb 28 '22 13:02 massongit

Yes I did https://github.com/textlint/editor/commit/9bff34ef1ff04f054a4e8c160f95227f87fd1aca

azu avatar Feb 28 '22 13:02 azu

@azu Could you distribute firefox .xpi file as Github release instead of AMO ?

onokatio avatar Dec 27 '22 00:12 onokatio

Firefox require sign to install addon. So, a signing is required.

I do not understand that Self-distribution for public is allowed in Firefox Addon Guideline.

azu avatar Dec 27 '22 00:12 azu