Firefox version 3.6.8 on Ubuntu 10.04

[James Hogarth]

>>>
>> Are you suggesting that a web site can install a Firefox add-on via
>> javascript without asking the users permission?
>>
>> Colin
>>
>
> Edit>Preferences>Security>Warn me when sites try to install add-ons....
>
> BC
>
>

Just tested it and that only refers to the whitelist for allowed sites
to provide extensions (and the associate warning bar that otherwise
appears) and not the install dialog for an extension.

With the box unchecked opening an XPI file in firefox still pops up
the standard "do you want to install this extension" dialog box with
the 3 second countdown before you can click on "okay" ....

So no that doesn't lead to extension installs without the user's permission.

James