# Escalating privilege

Useful workarounds and methods to get the power we want in the brave new world of webextensions.

 - Function in newtab
    - [chrome_url_overrides](https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/chrome_url_overrides)
 - Function in home page
    - [chrome_settings_overrides](https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/chrome_settings_overrides)
 - (Downside for both is that we need to reimplement a useful home and newtab page)

 - Shell and write access to filesystem
    - [Native_messaging](https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Native_messaging)
 - Hiding firefox chrome
    - API proposal for hiding tabstrip (but not nav bar): [Bug 1332447](https://api-dev.bugzilla.mozilla.org/show_bug.cgi?id=1332447)
        - :Gijs discusses why nav bar can't be hidden, but I still don't get why whatever happens in fullscreen can't just also happen in windowed mode.
    - Hiding with userChrome.css
        - http://kb.mozillazine.org/Chrome_element_names_and_IDs
        - e.g. "#tabbrowser-tabs { visibility: collapse !important; }"
        - requires restart, probably

 - Commandline thru toolbar API
    - [Bug 1215064](https://bugzilla.mozilla.org/show_bug.cgi?id=1215064)
    - As currently envisioned, size is fixed, I think
 - Commandline thru HTML injection into webcontent
    - Dangerous, see [Bug 1287590](https://bugzilla.mozilla.org/show_bug.cgi?id=1287590)
    - Shadow DOM would probably be simpler than iframe, but not implemented yet [Bug 1205323](https://bugzilla.mozilla.org/show_bug.cgi?id=1205323)
 - Commandline thru search suggestions on the omnibar (this is a bit mad)
    - [chrome_settings_overrides](https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/chrome_settings_overrides)

 - [Find API](https://bug1332144.bmoattachments.org/attachment.cgi?id=8905651)
    - [Bug 1332144](https://bugzilla.mozilla.org/show_bug.cgi?id=1332144)
    - [Demo](https://github.com/Allasso/Find_API_demo_WE_advanced)
    - How to replicate find links? Do we care?
    - Can this be used to exfiltrate info about about pages?

 - Can't navigate to restricted URLs
    - [about:](https://bugzilla.mozilla.org/show_bug.cgi?id=1371793)
    - [file:](https://bugzilla.mozilla.org/show_bug.cgi?id=1266960)