Skip to content

feat: ExtensionSettings blocked_permissions, allowed_permissions #208

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
bsmth wants to merge 2 commits into
base: main
Choose a base branch
from
Open

feat: ExtensionSettings blocked_permissions, allowed_permissions #208

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
9850c00
feat: Extension Permissions
bsmth Jun 29, 2026
e256c02
Apply suggestion from @bsmth
bsmth Jun 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions src/content/docs/reference/policies/ExtensionSettings.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -56,6 +56,13 @@ The configuration for each extension is a dictionary that can contain the fields
- `temporarily_allow_weak_signatures`: (Firefox 127) Boolean that indicates whether to allow installing extensions signed using deprecated signature algorithms.
- `private_browsing`: (Firefox 136, Firefox ESR 128.8) Boolean that indicates whether this extension should be enabled in private browsing.
- `update_url`: (Firefox 151) A string specifying the URL Firefox will use to check for extension updates. This overrides the update_url specified in the extension manifest or is used if no update_url is specified in the manifest.
- `blocked_permissions`: (Firefox 153) An array of [API permissions](https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/manifest.json/permissions) that extensions cannot be granted.
An extension that requires one of these permissions cannot be installed, and is disabled if it is already installed.
Optional permissions matching the list that were previously granted are revoked, and calls to `permissions.request()` for a blocked permission are rejected.
Host permissions (such as `<all_urls>` or match patterns) and internal permissions are ignored.
- `allowed_permissions`: (Firefox 154) An array of [API permissions](https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/manifest.json/permissions) that are exempted from `blocked_permissions` within the same configuration.
A per-extension `allowed_permissions` carves out exceptions to that extension's own `blocked_permissions`.
Setting `allowed_permissions` in the default (`"*"`) configuration has no effect.

## Interaction notes

Expand Down