
The add-ons have been blocked, and approval was temporarily paused for new add-on developer submissions when the proxy API was in use to create and deploy a fix.įirefox, starting with v.91.1, now also includes changes to harden the update process. However, they may also become a conduit for malicious purposes, such as data theft or eavesdropping, a challenge faced by all browser developers.Īccording to Mozilla, the add-ons removed in the sweep tampered with the browser's update functionality in particular, users were unable to download updates, access updated blocklists, or update remotely configured Firefox content. On October 25, the development team said that in early June, Firefox discovered add-ons that were misusing the browser's proxy API, used by software to manage how the browser connects to the internet.Īdd-ons are software modules that can be installed to customize a user's browsing experience and may include anti-tracking software, ad blockers, themes, and utilities. Hackers used this software flaw to steal credit card details from thousands of online retailers.

Over a million WordPress sites breached.Hit by ransomware? Don't make this first obvious mistake.

