tridactyl/doc/escalating-privilege.md
2018-05-24 08:10:56 -06:00

2.3 KiB

Escalating privilege

Useful workarounds and methods to get the power we want in the brave new world of webextensions.

  • Function in newtab

  • Function in home page

  • (Downside for both is that we need to reimplement a useful home and newtab page)

  • Shell and write access to filesystem

  • Hiding firefox chrome

    • API proposal for hiding tabstrip (but not nav bar): Bug 1332447
      • :Gijs discusses why nav bar can't be hidden, but I still don't get why whatever happens in fullscreen can't just also happen in windowed mode.
    • Hiding with userChrome.css
  • Commandline thru toolbar API

    • Bug 1215064
    • As currently envisioned, size is fixed, I think
  • Commandline thru HTML injection into webcontent

    • Dangerous, see Bug 1287590
    • Shadow DOM would probably be simpler than iframe, but not implemented yet Bug 1205323
  • Commandline thru search suggestions on the omnibar (this is a bit mad)

  • Find API

    • Bug 1332144
    • Demo
    • How to replicate find links? Do we care?
    • Can this be used to exfiltrate info about about pages?
  • Can't navigate to restricted URLs