We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Lolu chungechunge lwabekwa kunqolobane. Uyacelwa ubuze umbuzo omusha uma udinga usizo.

Can I prevent add-ons from making network requests?

  • 1 baphendule
  • 0 zinale nkinga
  • 1 view
  • Igcine ukuphendulwa ngu zeroknight

more options

I use several add-ons in firefox, and largely they feel trustworthy, but I dont have any means for limiting the scope of what they are able to do, the manifest tells me what they can do and thats it. I have read through this page https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions, but I have had a hard time even understanding which permissions let an add-on make network requests.

Barring the ability to actually stop add-ons from making network requests is there any visibility into what requests are being made by an extension, or all extensions in the browser?

I use several add-ons in firefox, and largely they feel trustworthy, but I dont have any means for limiting the scope of what they are able to do, the manifest tells me what they can do and thats it. I have read through this page https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions, but I have had a hard time even understanding which permissions let an add-on make network requests. Barring the ability to actually stop add-ons from making network requests is there any visibility into what requests are being made by an extension, or all extensions in the browser?

All Replies (1)

more options

There is no clear distinction between websites and extensions which is partly why they are called "WebExtensions". An extension with site permission can alter the code of a site and get it to make any network request without it being attributed to the extension.