{"id":31,"date":"2005-07-13T23:04:00","date_gmt":"2005-07-14T06:04:00","guid":{"rendered":"http:\/\/ilias.ca\/blog\/?p=31"},"modified":"2019-03-18T20:29:45","modified_gmt":"2019-03-19T00:29:45","slug":"xpi-blocking-whitelist-in-the-mozilla-application-suite","status":"publish","type":"post","link":"https:\/\/ilias.ca\/blog\/2005\/07\/xpi-blocking-whitelist-in-the-mozilla-application-suite\/","title":{"rendered":"XPI blocking whitelist in the Mozilla Application Suite"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.ilias.ca\/mozilla-37.png\" alt=\"\"\/><br \/>\nMany people don&#8217;t know this, but the <acronym title=\"Cross-Platform Installer\">XPI<\/acronym> <a title=\"click to view screenshot\" href=\"https:\/\/ilias.ca\/screenshots\/ff-xpipref.png\">blocking feature in Firefox<\/a> is also in the <a href=\"http:\/\/www.mozilla.org\/products\/mozilla1.x\/\">Mozilla Application Suite<\/a>, starting at version 1.7 and up. They just couldn&#8217;t get a user interface for it, on time for Mozilla 1.7.<\/p>\n<p>By default, the &#8220;<a title=\"click to view screenshot\" href=\"https:\/\/ilias.ca\/screenshots\/moz-SoftwareinstallPref.png\">Enable Software Installation<\/a>&#8221; setting will not block anything. Simply unchecking it, will turn <acronym title=\"Cross-Platform Installer\">XPI<\/acronym> installing off all together.<\/p>\n<p>To enable software installation, but but only for certain sites, you first need to enter <a href=\"https:\/\/ilias.ca\/mozilla\/customizing\/\">about:config<\/a> in the browser location bar, then search for the preference <span style=\"font-weight: bold; color: #333399;\">xpinstall.whitelist.required<\/span>, and set it to true.<br \/>\nBy default, there is one site on the whitelist: <a href=\"https:\/\/addons.mozilla.org\/\">update.mozilla.org<\/a>. To add a site to the list, use about:config to look for the pref <span style=\"font-weight: bold; color: #333399;\">xpinstall.whitelist.add<\/span>, double click on it (or right-click on it, and select &#8216;Modify&#8217;). Set the value to the domain you want to add. For example: ilias.ca<\/p>\n<p>To remove an entry from the whilelist, you&#8217;ll have to close down Mozilla, go to your <a href=\"https:\/\/ilias.ca\/mozilla\/profilefaq\/\">profile folder<\/a>, and manually remove the entry from the file hostperm.1.<\/p>\n<p>Related bugzilla items: <a title=\"UpdateEnabled check with permission manager (in effect block XPI installs from non-whitelisted sites)\" href=\"http:\/\/mozillanews.org\/bugzilla_warning.php3?id=240552\">240552<\/a>, <a title=\"XPInstall Permission Manager UI\" href=\"http:\/\/mozillanews.org\/bugzilla_warning.php3?id=270170\">270170<\/a>, <a title=\"Indicator\/dialog for blocked XPIs\" href=\"http:\/\/mozillanews.org\/bugzilla_warning.php3?id=246131\">246131<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Many people don&#8217;t know this, but the XPI blocking feature in Firefox is also in the Mozilla Application Suite, starting at version 1.7 and up. They just couldn&#8217;t get a user interface for it, on time for Mozilla 1.7. By&hellip;  <\/p>\n<p class=\"more-link\"><a href=\"https:\/\/ilias.ca\/blog\/2005\/07\/xpi-blocking-whitelist-in-the-mozilla-application-suite\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,3],"tags":[],"class_list":["post-31","post","type-post","status-publish","format-standard","hentry","category-mozilla","category-mozilla-suite"],"_links":{"self":[{"href":"https:\/\/ilias.ca\/blog\/wp-json\/wp\/v2\/posts\/31","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ilias.ca\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ilias.ca\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ilias.ca\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/ilias.ca\/blog\/wp-json\/wp\/v2\/comments?post=31"}],"version-history":[{"count":2,"href":"https:\/\/ilias.ca\/blog\/wp-json\/wp\/v2\/posts\/31\/revisions"}],"predecessor-version":[{"id":995,"href":"https:\/\/ilias.ca\/blog\/wp-json\/wp\/v2\/posts\/31\/revisions\/995"}],"wp:attachment":[{"href":"https:\/\/ilias.ca\/blog\/wp-json\/wp\/v2\/media?parent=31"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ilias.ca\/blog\/wp-json\/wp\/v2\/categories?post=31"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ilias.ca\/blog\/wp-json\/wp\/v2\/tags?post=31"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}