Firefox 3.6 Beta Blocks Third-Party Add-ons from Components Directory
Mozilla updates its Firefox 3.6 beta to block add-ons from adding code to Firefox's components directory. The move is meant to reduce crashes and will keep vendors from silently installing Firefox add-ons without permission from the user, Mozilla says.Mozilla has added an extra wall in Firefox 3.6 to block third-party add-ons from loading in the browser's application components directory. The change prevents third-party applications from adding code to Firefox's components directory-which houses much of Firefox's own code-and will thereby keep developers and software vendors from silently installing Firefox add-ons without the user's permission. It also will reduce the number of crashes, according to Mozilla.
Components installed by the addition of third-party code to the component directory cannot be managed by users through the add-ons manager or disabled if they are causing problems, Mozilla Human Shield Johnathan Nightingale wrote on the Mozilla Security Blog Nov. 16.