gnuzilla

commit 5aae45969cc032014268571a8b4064d2a29766ab
parent 12b8db108edb266c9e9f0cfc856ca1b613a03180
Author: Mark H Weaver <mhw@netris.org>
Date:   Sat, 16 Nov 2019 16:53:02 -0500

Require extensions in the user and system scopes to be signed by Mozilla.

* data/settings.js: Remove the IceCat-specific default setting of
xpinstall.signatures.required, thus reverting to the upstream default
value of 'true'.
* data/buildscripts/mozconfig-common: Add build option
"--with-unsigned-addon-scopes=app".

Diffstat:
M
data/buildscripts/mozconfig-common
 | 
1
+
M
data/settings.js
 | 
2
--

2 files changed, 1 insertion(+), 2 deletions(-)
diff --git a/data/buildscripts/mozconfig-common b/data/buildscripts/mozconfig-common
@@ -4,6 +4,7 @@ ac_add_options --with-distribution-id=org.gnu
 mk_add_options MOZ_MAKE_FLAGS=-j7
 ac_add_options --with-ccache=/usr/bin/ccache
 ac_add_options --enable-release
+ac_add_options --with-unsigned-addon-scopes=app
 
 
 ac_add_options --disable-debug
diff --git a/data/settings.js b/data/settings.js
@@ -322,8 +322,6 @@ pref("security.ssl3.rsa_des_ede3_sha", false);
 pref("browser.pocket.enabled", false);
 pref("extensions.pocket.enabled", false);
 
-// Do not require xpi extensions to be signed by Mozilla
-pref("xpinstall.signatures.required", false);
 // enable extensions by default in private mode
 pref("extensions.allowPrivateBrowsingByDefault", true);