Uploaded image for project: 'Browser Developer Extensions'
  1. Browser Developer Extensions
  2. BDE-141

Remove Google analytics from base code

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 2.1.1
    • Fix Version/s: 2.2.0
    • Component/s: Firefox

      Description

      As per Mozilla's request:

      3) Google Analytics as Remote Script / CSP
      Using a remote script for Google Analytics is not allowed. We don't allow add-ons to use remote scripts because they can create serious security vulnerabilities. Please see https://blog.mozilla.org/addons/2016/05/31/using-google-analytics-in-extensions/ for an approved method and remove Google Analytics from the CSP declaration.

      scripts/popup.js line 31, 32, 33

      5) We don't allow add-ons to use remote scripts because they can create serious security vulnerabilities. We also need to review all add-on code, and this makes it much more difficult. Please insert those scripts locally from your add-on code. If you are using a custom Content Security Policy that allows remote script execution, please adapt it accordingly.

      scripts/popup.js line 31, 32, 33

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 0 minutes
                  0m
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 10 minutes
                  10m