some work before v115

v115 will be delayed by a couple of days because of some things that need investigation before releasing, as discussed with @maltejur and @stanzabird elsewhere.

Quarantined Domains

some links about this new thing:

basically extensions which are not reviewed by Mozilla will not be allowed to run on certain domains for security reasons, as on delicate domains you don't want extensions to have access to all the data and control over the entire show. some comments:

  • for security reasons, this mechanism already kinda exists for internal browser pages and the addons store.
  • uBO, NoScript and other extensions which are recommended or popular among LW users are reviewed so they won't be restricted, ever.
  • even if we really really wanted this feature, we cannot fully support this feature at the moment because we exclude all remote settings. that will probably change in the future as per librewolf-community/browser/source#8 (closed)
  • without remote settings the feature works by means of a static list shipped with the browser. at the moment it is empty and we can keep track of it by monitoring extensions.quarantinedDomains.list, so at the moment the feature is silent regardless of what we do.
  • in v116 the per-addon UI that is discussed in the above bugzilla will be shipped, which is a good thing IMO.

I think overall this is not a bad thing but I prefer it to be enabled only when the UI exists. at the moment it doesn't impact us at all, so in theory we can do nothing and wait till v116 to reconsider a decision. if we still want to flip the pref to disable the feature just because we can, after that I suggest we enable it even though we might still not have the remote settings (there's the static list which we can monitor). thoughts?

Weather suggestions in urlbar

I've yet to investigate this, but honestly I would disable it because (in my very biased opinion) it's just bloat. it doesn't pose any serious privacy concern or anything but man do I hate weather suggestions in the browser lulz. the pref is browser.urlbar.suggest.weather.

edit: ok so it seems like the flip of that pref does nothing at the moment because browser.urlbar.weather.featureGate is false, so it is actually not enabled but it will be in the future.

Edited by fxbrit