Privacy Issue #3067

latest iceweasel plugins recommends nonfree addons

telur - over 1 year ago - . Updated over 1 year ago.

% Done:



  • steps to reproduce:
    updated to iceweasel 1:90.0-1.parabola1
    go into options > addons & themes > plugins
  • expected result:
    iceweasel shouldnt recommend nonfree software/services
  • actual result:
    iceweasel plugins tab recommends that offer nonfree addons

screenshot images in attachment


Screenshot at 2021-07-25 06-39-53.png (222 KB) Screenshot at 2021-07-25 06-39-53.png iceweasel plugins tab recommend addons from mozilla telur, 2021-07-24 11:48 PM



Updated by telur over 1 year ago

with in browser advanced config manager, i found some related settings to fix the problem above.

1. type " about:config " in url bar, enter
2. type " addons " in search preference name bar, enter
3. original settings:
4. modified settings:
5. restart the firefox and the problem should be fixed

im assume the configuration equivalent for the steps above is the same as add:
pref("extensions.getAddons.get.url", "");
pref("", "");
in iceweasel/browser/defaults/preferences/vendor.js

also, there is a setting to turn off firefox account integration (its a telemetry, would be dangerous for privacy)
pref("identity.fxaccounts.enabled", false);

please integrate this solution into iceweasel pkgbuild


Updated by bill-auger over 1 year ago

  • Status changed from unconfirmed to confirmed

we do not want to disable the firefox account access - it is a useful feature that people want - i doubt that there is any privacy concern by it simply being available - i would assume that it does not connect to mozilla until you sign in - if it could be shown to do otherwise, it would be worth discussing - perhaps a feature for the iceweasel-hardened package


Updated by bill-auger over 1 year ago

only '' seems to be useful - the other has no effect on the about:addons page


Updated by bill-auger over 1 year ago

  • Assignee set to bill-auger

i have added this to abslibre - the next release should have the new URL


Updated by bill-auger over 1 year ago

  • Status changed from confirmed to fixed

Updated by telur over 1 year ago

thanks bill :)

Also available in: Atom PDF