Angular 1.x Banned from Firefox Addons

#1

Post by secmax » Thu, Oct 20, 2016, 5:17 PM UTC

Angular 1.x Banned from Firefox Addons
github.com

Re: Angular 1.x Banned from Firefox Addons

#2

Post by smrtinsert » Thu, Oct 20, 2016, 5:27 PM UTC

> My information is that Google stopped supporting angular 1.x months ago. It is now a community driven project.

I totally missed this - was there a notice of this posted somewhere?

Re: Angular 1.x Banned from Firefox Addons

#3

Post by wnevets » Thu, Oct 20, 2016, 5:29 PM UTC

smrtinsert wrote: post #2

> My information is that Google stopped supporting angular 1.x months ago. It is now a community driven project. I totally missed this - was there a notice of this posted somewhere?

Yeah that doesn't sound true at all.

Re: Angular 1.x Banned from Firefox Addons

#4

Post by secmax » Thu, Oct 20, 2016, 5:31 PM UTC

I am really worried about the security implications for addons like bitwarden, if mozilla is right about this. I hope that competent people will take a close look.

Re: Angular 1.x Banned from Firefox Addons

#5

Post by viach » Thu, Oct 20, 2016, 5:34 PM UTC

Nice extension marketing

Re: Angular 1.x Banned from Firefox Addons

#6

Post by phs2501 » Thu, Oct 20, 2016, 5:35 PM UTC

So someone found some sort of vulnerability in Angular 1, told Mozilla about it, but told them not to tell the Angular team?

What is going on here?

Re: Angular 1.x Banned from Firefox Addons

#7

Post by encoderer » Thu, Oct 20, 2016, 5:37 PM UTC

Bitwarden is a password manager? And their engineer is asking, after being told a hint of serious security issues in their framework, to just forget about it and let them publish?

That's an interesting approach.

Re: Angular 1.x Banned from Firefox Addons

#8

Post by nathancahill » Thu, Oct 20, 2016, 5:38 PM UTC

Title should by "Angular 1.x Banned from Firefox Addons"

Re: Angular 1.x Banned from Firefox Addons

#9

Post by TD-Linux » Thu, Oct 20, 2016, 5:38 PM UTC

phs2501 wrote: post #6

So someone found some sort of vulnerability in Angular 1, told Mozilla about it, but told them not to tell the Angular team? What is going on here?

It is possible that the researcher also secretly shared the results with Google, but then nothing happened?

Re: Angular 1.x Banned from Firefox Addons

#10

Post by pestaa » Thu, Oct 20, 2016, 5:40 PM UTC

TD-Linux wrote: post #9

phs2501 wrote: post #6

So someone found some sort of vulnerability in Angular 1, told Mozilla about it, but told them not to tell the Angular team? What is going on here?

It is possible that the researcher also secretly shared the results with Google, but then nothing happened?

As claimed in the comments, Angular 1 is now community driven instead of officially supported by Google.