[Project_owners] how does the shellblock.xpi work for FireFox?

doron doron at nexgenmedia.net
Sat Jul 10 11:59:18 EDT 2004

For extensions in FireFox, install.rdf is now used.  install.js will 
still be read if no install.rdf is found.  You have to remember that 
install.js (XPInstall) is more powerfull, as it can set prefs, do 
filesystem manipulations, and so on.

Charles Melhorn wrote:

> The patch for the 'shell:' protocol handling vulnerability,
> (see http://www.mozilla.org/security/shell.html )
> shellblock.xpi, contains two files: bug250180.js, which
> disables the preference related to this problem, and
> install.js, which seemingly adds the first file to the
> "defaults/pref" folder.
> I thought, however, that for FireFox 0.9.x the "install.js"
> file was ignored by the Extension Manager, per the
> documentation found here:
> http://www.bengoodger.com/software/mb/extensions/packaging/extensions.html 
>    "install.js scripts are no longer used for Firefox and
>    Thunderbird extensions. If you provide an install.js script,
>    it will not be read|.|"
> Clearly, though, the install script was not ignored, as the
> new preference file was placed in the appropriate folder
> upon installation in FireFox. Has the install.js functionality
> been retained after all? Can someone point me to updated
> documentation or discussion of this?
> Thanks,
> Charles
> _______________________________________________
> Project_owners mailing list
> Project_owners at mozdev.org
> http://mozdev.org/mailman/listinfo/project_owners

More information about the Project_owners mailing list