Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

How would you install outside AMO on Android? When I click on a link to any .xpi file (signed or not), or navigate to its URL, Firefox just prompts me to download the file with no option to install the add-on. Unlike v68 and earlier, the current version of Firefox for Android (any channel) doesn't offer an action to open the .xpi in Firefox when I open it from my file manager. It doesn't seem to matter whether I have "xpinstall.signatures.enabled" disabled or not.

The other part of the issue is that I don't think I should have to ask Mozilla for permission to use a private add-on in Firefox on my own device, or show Mozilla the source code to the add-on before I can install it. What I do in a web browser on my device is not really Mozilla's business. Mozilla lists privacy as Principle 4 in its manifesto, so I think they should be able to understand this reasoning:

> Individuals’ security and privacy on the internet are fundamental and must not be treated as optional.

https://www.mozilla.org/en-US/about/manifesto/



Sad to hear it may have changed. I used to host my XPI and use a content type header to get it installed from my website.


I just installed an extension this way recently, so either they disabled this in the last month or so or its still a thing, but gp didn't set things up correctly.


Here's a test anyone can reproduce:

1. Visit the addons.mozilla.org page of any add-on. Example: Cookie AutoDelete - https://addons.mozilla.org/en-US/firefox/addon/cookie-autode...

2. If you are on a mobile browser, switch to desktop mode.

3. Tap or click "Add to Firefox".

Results:

- Prompt to install add-on: Firefox v68 (Android), Fennec F-Droid v68, Firefox v95-97 (desktop, all channels)

- Prompt to download .xpi file: Firefox v95-97 (Android, all channels), Iceraven v1.14, Mull v95, Fennec F-Droid v95

The results are exactly the same for any .xpi (signed or unsigned) that I self-host on another website. If you get different results, or if I'm doing it wrong, please correct me.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: