| layout | title | permalink | published | topic | contributors | last_updated_by | date | |
|---|---|---|---|---|---|---|---|---|
sidebar |
Add-ons Blocking Process |
/documentation/publish/add-ons-blocking-process/ |
true |
Publish |
|
kewisch |
2019-06-09 21:06:35 -0700 |
{% capture page_hero_banner_content %}
Add-ons enable users to add features to Firefox for a personalized browsing experience. Most add-ons are created with the best intent, providing users with useful and delightful features. However, add-ons can also be used to compromise personal data and security.
When Mozilla becomes aware of add-ons that go against user expectations or otherwise risk user privacy and security, it takes steps to block them from running in Firefox. This may happen proactively, or in response to an abuse report.
The following describes Mozilla’s common practices for dealing with add-ons that appear to violate the Add-on Policies. Authoritative information on the conditions for removing or revoking add-ons can be found in the Firefox Add-on Distribution Agreement and the Add-on Policies.
{% endcapture %} {% include modules/page-hero.html content=page_hero_banner_content %}
{% capture content_with_toc %}
When deciding whether to block an add-on from running in Firefox, we ask whether the risk is so great that it outweighs the user’s choice to install the software, the utility it provides, as well as the developer’s freedom to distribute and control their software. If we encounter a situation where we cannot make a clear-cut decision, we will err on the side of security to protect the user.
{% endcapture %} {% include modules/column-w-toc.html id="security-over-choice" content=content_with_toc %}
{% capture content %}
Depending on the nature of the policy violation, Mozilla will employ different types of blocks. With a hard block, the add-on is disabled in Firefox, and users are not able to override the block. This action is reserved for add-ons with the following characteristics:
- They appear to intentionally violate policy
- They contain critical security vulnerabilities
- They compromise user privacy
- They severely circumvent user consent or control
A soft block will disable an add-on by default, but allow the user to override and continue using it. Such a block is used for add-ons with the following characteristics:
- They cause severe stability and performance issues in Firefox
- They contain non-critical policy violations
Add-ons that appear to be clones, repeats or close copies of already blocked add-ons will also be removed. If an issue is known to affect only a subset of versions, the block may be applied to the affected versions specifically. Add-ons that contain obfuscated or comparably unreadable code will also be blocked.
{% endcapture %} {% include modules/one-column.html id="blocking-criteria" content=content aside="" %}
{% capture content %}
When we decide to block an add-on, we may reach out to the developer if we believe the issue can be remedied. As the security of users may be at stake, we require developers to respond within three days. If no response is received within this timeframe, or the developer isn’t able to address the issue, we may proceed with the block.
More commonly, we will not reach out to developers prior to blocking if it appears that the add-on is intentionally violating our policies, or the violation is sufficiently severe.
{% endcapture %} {% include modules/one-column.html id="developer-outreach" content=content aside="" %}
{% capture content %}
If you have encountered an add-on that you believe meets the criteria for being blocked, you may request a block. Note that developers cannot request a block of their own add-ons.
Mozilla only blocks add-ons based on the Firefox distribution agreement and add-on policies. When requesting a block, please read these carefully as the policies do allow certain forms of monetization and data collection.
{% endcapture %} {% include modules/one-column.html id="requesting-a-block" content=content aside="" %}
{% capture content %}
In addition to add-ons, Mozilla may also block other types of software that pose a risk to the user.
Mozilla may limit hardware acceleration features of graphics cards for certain graphics driver versions in accordance with the graphics driver blocks policy. This is done for stability reasons, to avoid driver crashes that would interrupt the user.
In addition, we may block certain plugins that are known to cause stability issues or contain security vulnerabilities. Depending on the severity, a plugin may be forced to require a click from the user to activate, is disabled with an option for the user to enable, or blocked from running in Firefox. This category includes injected third party libraries that interfere with the functionality of Firefox.
{% endcapture %} {% include modules/one-column.html id="blocking-other-types-of-third-party-software" content=content aside="" %}
{%- include page-meta-data.html -%}
{%- include up-next.html -%}