<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Review extension access before opening sensitive account pages in Discussions</title>
    <link>https://connect.mozilla.org/t5/discussions/review-extension-access-before-opening-sensitive-account-pages/m-p/146841#M60255</link>
    <description>&lt;P&gt;Could Firefox make it easier to review extension access for a specific site before opening an account page?&lt;/P&gt;&lt;P&gt;Consider someone visiting an email account, a banking site, or a crypto account such as BYDFi. The useful browser-level question is which installed extensions have permission to read or change content on that particular site. A quick, understandable review could help people make a more informed choice before signing in.&lt;/P&gt;&lt;P&gt;The workflow I would like to discuss is a site-specific extension access summary, reachable from the toolbar. It could show:&lt;/P&gt;&lt;P&gt;- Extensions with permission to read or modify content on the current site, distinguishing broad host permissions from temporary access.&lt;BR /&gt;- A plain-language explanation of what each displayed permission allows.&lt;BR /&gt;- A direct route to the relevant existing permission controls or to disable an extension.&lt;BR /&gt;- Clear information about whether a change affects the current tab, all tabs for that site, or the extension everywhere, including whether reloading is needed.&lt;/P&gt;&lt;P&gt;This should be an optional review that users open deliberately. Repeated warnings on every visit could become distracting and train people to dismiss them.&lt;/P&gt;&lt;P&gt;The wording also matters. Permission to access a page does not prove that an extension has collected data, and a permission summary cannot certify that an account or browser session is secure. It should explain the scope of the information shown, including any extension capabilities that are outside that view.&lt;/P&gt;&lt;P&gt;I am interested in discoverability and clarity around the controls, rather than reporting a specific failure or security incident. If an existing Firefox workflow already provides these details, it would be useful to discuss how users could find it more easily.&lt;/P&gt;&lt;P&gt;Would a site-specific summary be helpful, or would clearer links and explanations in the existing Extensions menu address this better?&lt;/P&gt;</description>
    <pubDate>Wed, 11 Nov 2026 09:57:09 GMT</pubDate>
    <dc:creator>Allyally</dc:creator>
    <dc:date>2026-11-11T09:57:09Z</dc:date>
    <item>
      <title>Review extension access before opening sensitive account pages</title>
      <link>https://connect.mozilla.org/t5/discussions/review-extension-access-before-opening-sensitive-account-pages/m-p/146841#M60255</link>
      <description>&lt;P&gt;Could Firefox make it easier to review extension access for a specific site before opening an account page?&lt;/P&gt;&lt;P&gt;Consider someone visiting an email account, a banking site, or a crypto account such as BYDFi. The useful browser-level question is which installed extensions have permission to read or change content on that particular site. A quick, understandable review could help people make a more informed choice before signing in.&lt;/P&gt;&lt;P&gt;The workflow I would like to discuss is a site-specific extension access summary, reachable from the toolbar. It could show:&lt;/P&gt;&lt;P&gt;- Extensions with permission to read or modify content on the current site, distinguishing broad host permissions from temporary access.&lt;BR /&gt;- A plain-language explanation of what each displayed permission allows.&lt;BR /&gt;- A direct route to the relevant existing permission controls or to disable an extension.&lt;BR /&gt;- Clear information about whether a change affects the current tab, all tabs for that site, or the extension everywhere, including whether reloading is needed.&lt;/P&gt;&lt;P&gt;This should be an optional review that users open deliberately. Repeated warnings on every visit could become distracting and train people to dismiss them.&lt;/P&gt;&lt;P&gt;The wording also matters. Permission to access a page does not prove that an extension has collected data, and a permission summary cannot certify that an account or browser session is secure. It should explain the scope of the information shown, including any extension capabilities that are outside that view.&lt;/P&gt;&lt;P&gt;I am interested in discoverability and clarity around the controls, rather than reporting a specific failure or security incident. If an existing Firefox workflow already provides these details, it would be useful to discuss how users could find it more easily.&lt;/P&gt;&lt;P&gt;Would a site-specific summary be helpful, or would clearer links and explanations in the existing Extensions menu address this better?&lt;/P&gt;</description>
      <pubDate>Wed, 11 Nov 2026 09:57:09 GMT</pubDate>
      <guid>https://connect.mozilla.org/t5/discussions/review-extension-access-before-opening-sensitive-account-pages/m-p/146841#M60255</guid>
      <dc:creator>Allyally</dc:creator>
      <dc:date>2026-11-11T09:57:09Z</dc:date>
    </item>
  </channel>
</rss>

