Firefox 17 Will Make It Harder for Sites to Access Extension Data

Mozilla is making a change to the way Firefox extensions can expose data to websites to bolster security. Now, any website can access extension objects that have been made visible to web content.

There are reasons why you want websites to access this data, extensions that work together with web apps need this for example.

The problem is that, so far, developers have only had the option of making this data available to all or not at all. That's about to change, extensions will need to add websites which they want accessing their data to a whitelist.

This applies only to object data, things like strings, integers or other variables will still be accessible to all.

Right now, in Firefox 15 Beta, having object data exposed to all issues a warning. However, the whitelist will become mandatory with Firefox 17, now in the Nightly channel. To avoid any problems, developers should test their extensions with Firefox 15 and watch for warnings in the JavaScript console.

Via: Firefox 17 Will Make It Harder for Sites to Access Extension Data