mirror of
https://github.com/vale981/tridactyl
synced 2025-03-05 09:31:41 -05:00
38 lines
2.3 KiB
Markdown
38 lines
2.3 KiB
Markdown
# Escalating privilege
|
|
|
|
Useful workarounds and methods to get the power we want in the brave new world of webextensions.
|
|
|
|
- Function in newtab
|
|
- [chrome_url_overrides](https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/chrome_url_overrides)
|
|
- Function in home page
|
|
- [chrome_settings_overrides](https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/chrome_settings_overrides)
|
|
- (Downside for both is that we need to reimplement a useful home and newtab page)
|
|
|
|
- Shell and write access to filesystem
|
|
- [Native_messaging](https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Native_messaging)
|
|
- Hiding firefox chrome
|
|
- API proposal for hiding tabstrip (but not nav bar): [Bug 1332447](https://api-dev.bugzilla.mozilla.org/show_bug.cgi?id=1332447)
|
|
- :Gijs discusses why nav bar can't be hidden, but I still don't get why whatever happens in fullscreen can't just also happen in windowed mode.
|
|
- Hiding with userChrome.css
|
|
- http://kb.mozillazine.org/Chrome_element_names_and_IDs
|
|
- e.g. "#tabbrowser-tabs { visibility: collapse !important; }"
|
|
- requires restart, probably
|
|
|
|
- Commandline thru toolbar API
|
|
- [Bug 1215064](https://bugzilla.mozilla.org/show_bug.cgi?id=1215064)
|
|
- As currently envisioned, size is fixed, I think
|
|
- Commandline thru HTML injection into webcontent
|
|
- Dangerous, see [Bug 1287590](https://bugzilla.mozilla.org/show_bug.cgi?id=1287590)
|
|
- Shadow DOM would probably be simpler than iframe, but not implemented yet [Bug 1205323](https://bugzilla.mozilla.org/show_bug.cgi?id=1205323)
|
|
- Commandline thru search suggestions on the omnibar (this is a bit mad)
|
|
- [chrome_settings_overrides](https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/chrome_settings_overrides)
|
|
|
|
- [Find API](https://bug1332144.bmoattachments.org/attachment.cgi?id=8905651)
|
|
- [Bug 1332144](https://bugzilla.mozilla.org/show_bug.cgi?id=1332144)
|
|
- [Demo](https://github.com/Allasso/Find_API_demo_WE_advanced)
|
|
- How to replicate find links? Do we care?
|
|
- Can this be used to exfiltrate info about about pages?
|
|
|
|
- Can't navigate to restricted URLs
|
|
- [about:](https://bugzilla.mozilla.org/show_bug.cgi?id=1371793)
|
|
- [file:](https://bugzilla.mozilla.org/show_bug.cgi?id=1266960)
|