[tor-bugs] #27323 [Applications/Tor Browser]: TB claims to prevent addon and tries to install it

[Tor Bug Tracker & Wiki]

#27323: TB claims to prevent addon and tries to install it
------------------------------------------+-------------------------------
     Reporter:  traumschule               |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:  tbb, tbb-security
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+-------------------------------
 (TBB 8.0a10 buster 32bit)

 This is clearly a bug, at least an inconsistency, although I don't even
 know your expected behavior.
 Are addons allowed or why did it say it prevented the addon from asking?

 - i went to
 https://github.com/RequestPolicyContinued/requestpolicy/issues/754
 - tried to install https://requestpolicy.256k.de/requestpolicy-nightly.xpi

 The observed popup depended on how i went there 1) clicking, 2) new tab,
 3) reload, but not completely reproducible.

 The addon is incompatible with the browser, but it was downloaded, even
 though the popup said it prevented the website from asking while showing
 two buttons:

 [https://share.riseup.net/#yWRpqPp-tFajnRBGrmxTRA Question: Don't Allow /
 Allow]

 At first it looked quite good but i kept trying:
 {{{
 [NoScript] Cannot collect noscript activity data Error: Could not
 establish connection. Receiving end does not exist.
 Stack trace:
 send at moz-
 extension://690e2090-a396-4f24-a8b0-7474d05cf8cf/lib/Messages.js:37:22
  Could not establish connection. Receiving end does not exist. send at moz-
 extension://690e2090-a396-4f24-a8b0-7474d05cf8cf/lib/Messages.js:37:22
   log.js:12:62
         error moz-
 extension://690e2090-a396-4f24-a8b0-7474d05cf8cf/lib/log.js:12:62
         collectSeen moz-
 extension://690e2090-a396-4f24-a8b0-7474d05cf8cf/bg/main.js:235:9
 1535290291367   addons.xpi      WARN    disabling legacy extension
 rpcontinued at non-amo.requestpolicy.org
 1535290291373   addons.xpi      WARN    disabling legacy extension
 rpcontinued at non-amo.requestpolicy.org
 1535290291374   addons.xpi      WARN    disabling legacy extension
 rpcontinued at non-amo.requestpolicy.org
 1535290291595   addons.xpi      WARN    disabling legacy extension
 rpcontinued at non-amo.requestpolicy.org
 1535290347247   addons.xpi      WARN    disabling legacy extension
 rpcontinued at non-amo.requestpolicy.org
 1535290347248   addons.xpi      WARN    disabling legacy extension
 rpcontinued at non-amo.requestpolicy.org1535290347523   addons.xpi      WARN
 disabling legacy extension rpcontinued at non-amo.requestpolicy.org
 [NoScript] Cannot collect noscript activity data Error: Could not
 establish connection. Receiving end does not exist.
 Stack trace:
 send at moz-
 extension://690e2090-a396-4f24-a8b0-7474d05cf8cf/lib/Messages.js:37:22
  Could not establish connection. Receiving end does not exist. send at moz-
 extension://690e2090-a396-4f24-a8b0-7474d05cf8cf/lib/Messages.js:37:22
   log.js:12:62
         error moz-
 extension://690e2090-a396-4f24-a8b0-7474d05cf8cf/lib/log.js:12:62
         collectSeen moz-
 extension://690e2090-a396-4f24-a8b0-7474d05cf8cf/bg/main.js:235:9
 }}}

 = Screenshots
 [https://share.riseup.net/#O3hXVHOcctoScK_TB-y4cA addon prevented with
 log]
 [https://share.riseup.net/#3GHf5dUfCDMozhOhTjW6jg Downloading and
 verifying add-on]
 [https://share.riseup.net/#lT1oToJoV7DNJ3rhJa0DaA addon not compatible]
 [https://share.riseup.net/#XH9cYx6xZwLtNn0AnOKYcA addon not compatible
 with log]
 [https://share.riseup.net/#eGR_L26TIt_BB2hPzc72iQ addon prevented - not
 really]

 [https://share.riseup.net/#MMxxQOHaNjZsPBgWtQXp_A addon questions]

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27323>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online