BB 41598: Prevent NoScript from being removed/disabled. (9df2a11d) · Commits · The Tor Project / Applications / Tor Browser

toolkit/components/extensions/Extension.sys.mjs

+18 −0

Original line number	Diff line number	Diff line
		@@ -981,6 +981,15 @@ export class ExtensionData {
		this.eventPagesEnabled = lazy.eventPagesEnabled;
		}

		/**
		* Whether this is the NoScript extension.
		*
		* @type {boolean}
		*/
		get isNoScript() {
		return this.id === "{73a6fe31-595d-460b-a920-fcc0f8843232}";
		}

		/**
		* A factory function that allows the construction of ExtensionData, with
		* the isPrivileged flag computed asynchronously.
		@@ -4316,6 +4325,15 @@ export class Extension extends ExtensionData {
		}
		}

		// tor-browser#40253: Explicitly allow NoScript in Private Browsing mode.
		if (this.isNoScript) {
		lazy.ExtensionPermissions.add(this.id, {
		permissions: [PRIVATE_ALLOWED_PERMISSION],
		origins: [],
		});
		this.permissions.add(PRIVATE_ALLOWED_PERMISSION);
		}

		// We only want to update the SVG_CONTEXT_PROPERTIES_PERMISSION during
		// install and upgrade/downgrade startups.
		if (INSTALL_AND_UPDATE_STARTUP_REASONS.has(this.startupReason)) {

+9 −0

Original line number	Diff line number	Diff line
		@@ -857,6 +857,15 @@ export class AddonInternal {
		}
		}

		// Bug 41598: prevent NoScript from being uninstalled/disabled
		if (this.id === "{73a6fe31-595d-460b-a920-fcc0f8843232}") {
		permissions &= ~(
		lazy.AddonManager.PERM_CAN_UNINSTALL \|
		lazy.AddonManager.PERM_CAN_DISABLE \|
		lazy.AddonManager.PERM_CAN_CHANGE_PRIVATEBROWSING_ACCESS
		);
		}

		return permissions;
		}