Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

What extension permission "Access your data for sites in the xxx domain" means?

more options

Hi everybody,

I just got this message requesting to grant additional permissions to an updated extension (see file attached). However, the message is meaningless to me.

Doing a fast check in Google I haven't managed to find any explanation about what data will be accessed.

I think that a better message, maybe with a link to support page with more detailed explanations, would be highly appreciated, specially knowing how much Mozilla cares about privacy.

Best

Hi everybody, I just got this message requesting to grant additional permissions to an updated extension (see file attached). However, the message is meaningless to me. Doing a fast check in Google I haven't managed to find any explanation about what data will be accessed. I think that a better message, maybe with a link to support page with more detailed explanations, would be highly appreciated, specially knowing how much Mozilla cares about privacy. Best

All Replies (7)

more options

Attaching image

more options
more options

For a new install, it seem to want very sweeping privileges for something specific to YouTube (image attached). Often developers require unexpected permissions due to the way they have implemented particular features. Either they didn't take an approach that minimized permission requirements, or Firefox's design didn't allow them to ask for less. Or... they're up to something unexpected. This is hard for outside observers to assess, so contacting the developer makes sense.

more options

As far as I can tell, the phrase "Access your data for..." indicates a "host permission." It appears to mean that the site wants extra permissions related to pages on those servers. There is an article on the Mozilla Developer Network site which mentions what is involved with those extra permissions: https://developer.mozilla.org/Add-ons/WebExtensions/manifest.json/permissions#Host_permissions

But this is not enough information to know whether you should trust a particular extension. There is both an automated and a human review of extensions on the Add-ons site to filter out major problems. But what may seem logical to a reviewer still might bother you, so it makes sense to look into it further.

more options

By the way, the permission prompts for WebExtensions-based extensions are similar to the ones presented by Chrome and there have been articles about how to assess those for 5+ years, so hopefully someone will update their analyses for Firefox soon. For example:

more options

jscher2000 said

By the way, the permission prompts for WebExtensions-based extensions are similar to the ones presented by Chrome and there have been articles about how to assess those for 5+ years, so hopefully someone will update their analyses for Firefox soon. For example:

Thanks jscher2000 for your answer was very helpful. Would like to ask you 2 things: 1) if in Firefox an add-on doesn’t require to access something on your browser does that means that it doesn’t or that maybe it does and doesn’t asks your permission? 2) As far as I understand an add-on can send all your browsing behaviour to a server and then sell it to advertisers.

Modified by user1414492

more options

Hi izytalas, I haven't learned anything more since September, so you may wish to check with other sources on these questions. Mozilla has a forum specifically for Add-ons:

https://discourse.mozilla-community.org/c/add-ons