[Project_owners] Anecdotes about Extension Development

Ramiro Aparicio frisco82 at gmail.com
Sun Sep 14 08:46:09 PDT 2008


Well, that is not so strange all extensions are within the same scope so
everyone can hijack other functions (it depends on the loading order, which
depends on installation order) but I learned it by the hard way I did not
create a custom function with a stange name I defined my own "eval"
function, you can imagine how everything started to crash when I added more
extensions to my installation of Firefox.
Kindly enough Mouse Gestures developers told me about that shared scope
problem when I opened a bug about our strange interactions :P

Some other stories to tell:
 + Initiallly my IDE was: Notepad + Winrar (yes I made the whole zip and
rename process every time) + TortoiseCVS, I then changed to Notepad + 7zip +
Bat + Tortoise, then Eclipse + 7zip to finally Eclipse with Ant builder,
originally I took me 5 minutes to make a xpi while now its only 20-30
seconds.
 + I will never forget the last second change about security restrictions in
RC3 a week before Firefox 3 release, everyone already had their T-shirt at
home for updating extensions to be compatible with FF3 but a week before
release hundreds of extensions developers saw their extensions broken and
with 6 days to rerelease and the review list on AMO bigger than ever.
I still love one of the comments on that bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=292789#c101
+ Until my last release a couple of months ago I still was testing my
extension in Seamonkey, I thought that if it worked there I would work in
every version of Firefox.

My motivations to develop Foxgame: It was terribly boring to make a lot of
time calcs by hand and having to select an option everytime I logged in
Ogame, so I made a Greasemonkey script and some time later I was making
Foxgame as an extension.

Ramiro Aparicio

---------------------------------------------------------------------------------
Desarrollador de FoxGame http://foxgame.mozdev.org
Blogero aficionado en http://www.habitaquo.net


On Sun, Sep 14, 2008 at 4:57 PM, Arturo 'Buanzo' Busleiman <
buanzo at buanzo.com.ar> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Brian King wrote:
> > Mozdev has been around since 2000 and this seems like the best group of
> > all to ask for contributions. So if you have any stories that you think
> > would fit, I'd love to hear them.
>
> I have a strange thing.
>
> In a quickie, I created a function outside of my singleton component. This
> function was called
> getCharPref(), and itwas defined like function getCharPref(blah,blah) {blah
> blah}.
>
> Problem: Some OTHER extension was calling it. Why? I guess it had it's own
> getCharPref, but for some
> reason MINE was being called. Was I overloading a global getCharPref?
> Should that even be possible?
> No idea. But it's definitely interesting. I could hijack other extensions
> with a perfectly "safe"
> extension. Gross. (re-tested with latest firefox).
>
> - --
> Arturo "Buanzo" Busleiman
> Independent Linux and Security Consultant - SANS - OISSG - OWASP
> http://www.buanzo.com.ar/pro/eng.html
> Mailing List Archives at http://archiver.mailfighter.net
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFIzSZIAlpOsGhXcE0RCj2iAJ9vAGL70/YYoo5OIYnf1Ju7NCWSGQCeNemt
> NCMcUNJJnfPEnUpgGsu69eA=
> =2xE8
> -----END PGP SIGNATURE-----
> _______________________________________________
> Project_owners mailing list
> Project_owners at mozdev.org
> https://www.mozdev.org/mailman/listinfo/project_owners
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.mozdev.org/pipermail/project_owners/attachments/20080914/1a95ef62/attachment.html>


More information about the Project_owners mailing list