76
How to check that an add-on doesn't spy on you ?
(sh.itjust.works)
A place to discuss the news and latest developments on the open-source browser Firefox
For smaller extensions, you can start by looking at the
manifest.json
as this file is the entry point. You can see which part of the code needs access to 'everything' and go from there.https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/manifest.json
For example, with Instance Assistant for Lemmy, you need to give access to all sites because it needs to run on any Lemmy site and that's not something you can hardcode in.