Uploaded image for project: 'Browser Developer Extensions'
  1. Browser Developer Extensions
  2. BDE-191

Update DOMPurify library in FF extension to latest version

    XMLWordPrintable

    Details

    • Type: Problem
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 3.0.3
    • Fix Version/s: 3.1.0
    • Component/s: Chrome, Firefox

      Description

      Hello,
      
      You are receiving this email because you are registered as a developer of at least one Firefox extension that uses the DOMPurify library.
      
      We have recently become aware that DOMPurify versions 2.0.6 and older contain a cross-site scripting vulnerability, which could make users of your extension exposed to attackers targeting their browsers.
      
      To protect the security of your extension's users, please update your extension to use the latest version of DOMPurify as soon as possible. Recent versions of DOMPurify include additional security updates to make the library less vulnerable.
      
      We will stop accepting submissions that use previous versions of DOMPurify on September 17, 2020, and may start blocking existing extensions that use insecure versions during the first week of November 2020.
      
      If you have any questions, please reach out to us at amo-admins@mozilla.com.
      
      Best regards,
      
      The Add-ons Team

      AC

      • DOMPurify updated to latest version
      • Chrome extension assessed and updated if needed too

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 2 hours
                  2h