Firefox is moving towards the WebExtensions standard which promises improvements in stability, cross-browser compatibility, and more security. At the same time they're gradually dropping support for legacy add-ons (bootstrapped extensions, add-on SDK, etc.).
Unfortunately, the WebExtension APIs are much less powerful than legacy add-ons which by contrast have full control over the browser. I fully understand the motivation for the switch, but the features my add-on provides just can't possibly work with limited capabilities of a WebExtension.
What are my options to continue developing a legacy add-on with as few cutbacks as possible? How do other add-ons that won't work as a pure WebExtension solve this problem? Are there any niche projects dedicated to maintaining some sort of legacy extension "hack", or will I have to heavily modify Firefox myself to get any legacy add-ons installed in the future?
(I'm aware that I won't be able to submit my add-on to AMO or get it signed by Mozilla and that supporting full extensions is a potential security risk. But since my add-on is targeting a tech-savvy audience, I'm not too concerned about moderately complex workarounds.)
As the magic 8 ball says: "Cannot predict now".
The reality is that we don't know yet what is going to be required to continue to run non-WebExtensions based add-ons past the release of Firefox 57. All we know is that Mozilla has stated that for Firefox 57:
Firefox will only run WebExtensions.
AMO will continue to support listing and updating legacy add-ons after the release of 57 in order to have an easier transition. The exact cut-off time for this support hasn’t been determined yet.
It had previously been stated that the restriction to WebExtensions-only would only apply to the Release and Beta channels, so:
It may be possible to continue to run non-WebExtension based add-ons on:
Developer Edition
Nightly
Unbranded Release and Beta (unknown status)
It is currently unclear if these will actually be possibilities. If they will be possibilities, it is unclear for how long it will remain possible for older add-ons to function (both due to changes to Firefox and/or non-WebExtensions being intentionally disabled). The fact that AMO will continue to support listing and updates to non-WebExtension add-ons is an encouraging sign that we will still be able to use them in Firefox releases that are not the main Release and Beta channels.
Other options include:
The Firefox ESR 52 release. The pattern is that this would be supported through the normal release of Firefox 60, or so. Personally, I feel that Mozilla should plan to have an ESR release prior to any major changes in functionality (i.e. have a Firefox 56 ESR), but that does not appear to be how Mozilla does things.
The various forks that have been made of Firefox. Each fork would have to be checked to see what their plans are for this change.
Any new fork made specifically to continue to support non-WebExtension add-ons.
A hack may be determined to re-enable non-WebExtension support, similar to the one that exists to disable checking for add-on signing.
You should keep in mind that the plans are for Firefox to fundamentally change in the future. A significant reason for moving away from the more capable add-on types (non-WebExtensions based extensions along with complete-themes) is to allow Firefox to be changed without the need to consider maintaining compatibility with more capable add-ons which rely on the internals of Firefox for their operation. When, exactly, these breaking changes will be rolled out is unclear.
Personally, I'm in a similar boat. None of my released add-ons are possible to move to WebExtensions. Many of the other add-ons which I use are clearly not possible to move to WebExtensions. Frankly, I'm not looking forward to using Firefox without the capabilities some of those add-ons provide. Thus, I will be continuing to look at what options are available as we get closer to Firefox 57.
However, even if I find no option to use more capable add-ons after Firefox 52 ESR is EOL'ed, I may continue to use Firefox. My primary reason for doing so instead of switching to Chrome would be the fact that Firefox extensions go through a review process, whereas Chrome extensions released though the Chrome store can be very bad from the point of view of both security and privacy.
Regarding your question:
Are there any niche projects dedicated to maintaining some sort of legacy >extension "hack", or will I have to heavily modify Firefox myself to get any >legacy add-ons installed in the future?
Besides the previously said FF52ESR, at least, there are 2 alive projects based in Firefox code that are focused in keeping compatibility with legacy extensions.
Waterfox 56 (updated and compatible with legacy addons and webextensions)
Basilisk 201804 (updated and based in FF52, targeting v55)
On the other hand you have Palemoon 27.x which also is still under support but it is based in pre Australis FF interface, so it will be compatible with old-legacy addons.
Download and install latest Nightly Firefox (https://www.mozilla.org/en-US/firefox/58.0a1/releasenotes) (you can right click on the icon, hit Properties, and then add -no-remote -p to the Target address, as in "C:\Program Files\Nightly\firefox.exe" -no-remote -p which will then enable you to use more than one Profile)
In about:config (paste in address bar and hit Enter key) look for extensions.legacy.enabled and right click and toggle it to true in.
Download "anyway" the latest development version of TMP, (https://addons.mozilla.org/en-US/firefox/addon/tab-mix-plus/versions/0.5.0.5pre.171027a1) to your download folder (since Nighlty will not install it normally), then under File go to Open File and navigate to that file (with the /xpi extension) in your download folder, and install it, and restart Nightly.
Unlikely that this will work with the standard Firefox 57+ release, but TMP developer is working on the require rewrite. May God help him.
Related
It is mentioned that Legacy add-ons are deprecated(here). Though I am trying to make a very minor update to an existing add-on which is working fine on release channel.
I installed the add-on in the FF Developer Edition and found some issues:
document.commandDispatcher.focusedWindow.getSelection().toString()(to
get the selected text) is not returning the selected value with no
error.
The overlay window height and width is set using preferences but it seems to be not reading.
Yes it works for the moment and will probably continue to do so for at least another year at the time of writing. But developer edition runs with e10s enabled, so your addon is probably facing e10s compatibility issues which will also hit the release channel sooner than discontinuation of those addon types.
As immediate workaround you can disable it in about:preferences, in the short term you will have to fix those issues, in the mid and long term you'll have to migrate to newer addon frameworks.
I just installed Firefox on a new computer running Windows 8.1.
I usually use Chrome but recently I've been redesigning my website and today I tried loading it on multiple browsers to see if there were any problems.
It's a Flash games site with lots of flash ads. So when I went to my site in the new Firefox browser, I was surprised to see a lot of "plugin needed" boxes.
I tried loads of sites, and it became apparent that flash was not installed in the firefox browser at all. No Flash was loading.
Bizarrely, the grey box telling me I needed a plugin didn't give me any hint as to what plugin I needed, provided no link, and even blocked the fail-safe link to adobe that is displayed if flashplayer is not installed when using swfobject.js.
I tried searching for the flash player update in the firefox add-ons - nothing.
I tried searching on google and downloaded the general flash player update (http://get.adobe.com/flashplayer/) - installed it and nothing changed.
Eventually after 20 minutes of searching, I found this obscure page on Adobe:
http://www.adobe.com/products/flashplayer/distribution3.html
I downloaded and ran the exe for 'Plugin-based browsers' and this worked.
It appears the latest version of Firefox has deliberately not included Flash Player, which is utterly mad if that's really true.
However, I can't find any discussion or documentation that this is the case. But then why wasn't it included in my version?
Does anybody know anything about this?
Firefox has never included Flash, you always need to go to http://get.adobe.com/flashplayer and download the Flash Plugin on your first install of Firefox. Make sure that you turn on autoupdate for Flash by using the Flash cpanel app in your Windows Control Panel. Then check regularly to make sure Flash is still autoupdating. It can have a bad habit of failing.
It's only recently that Microsoft includes Flash and only on IE on Windows 8+ as a copy of Google's attempt to increase Flash security by including it in Chrome some time back. IE gets its Flash updates through Windows Update when Microsoft gets the patches applied.
Google is the 800lb gorilla that gets what it wants and twisted Adobe's arm to force them to supply Flash code so they can do their own updates via their Pepper Flash module which updates when Chrome autoupdates.
While Mozilla will warn you that Flash is out of date, they do not have the monetary clout like huge corporations (Microsoft, Google) to force Adobe to give them source code so they can fix Adobe's security sieve as it happens.
Mozilla has chosen to promote HTML5 and open DRM to hurry the eventual demise of a piece of Macromedia Legacy web extensions that has been plaguing us with serious zero day exploits (Jan-Feb 2015 most recent) that often appear back-to-back and often get 2 try patch releases in the hope that it gets fixed.
And in that same timeframe, often Chrome and Windows 8 versions of IE have a similar lag to bug fix, though a lot quicker than Adobe.
Get in the habit manually checking Chrome's version, Chrome can suffer update failure despite its automatic update feature.
IE has a handy debug feature that lets you emulate older versions of IE (7-10). Is there a similar feature as an addon for Firefox/Chrome that lets you, for example, turn back Chrome to only have the features it had a few versions ago? Or in Firefox test a site without the latest Firefox versions' CSS features? Or roughly show what a site would look like in IE7 by removing border-radius, shadows and advanced CSS effects, while not actually changing the stylesheets as loaded in the browser?
It seems effectively possible to remove JS features just on one page - for example, window.ArrayBuffer = undefined would cause lack of ArrayBuffer functionality as would happen in older browsers - but is there any addon, or api to write an addon, to go a step beyond "User agent switch" and remove features for testing?
Is there a similar feature as an addon for Firefox/Chrome that lets you, for example, turn back Chrome to only have the features it had a few versions ago?
Use a feature called profiles to install and run multiple versions of the browser in parallel:
Mozillazine: Using Multiple Profiles
Chromium: Creating and Using Profiles
Opera: How to make multiple profiles?
These are more future-proof than the Microsoft solution:
Note You may be able to use legacy document modes to emulate the behavior of earlier versions. Should you choose to do this, be aware that this is a temporary solution at best. Starting with Internet Explorer 11 Preview, document modes are consider deprecated and may not be supported in any future versions of the browser. For best results, you should update your sites and apps to use features and techniques supported by industry standards and multiple browsers.
Note Starting with IE11, document modes are considered deprecated and should no longer be used. Webpages that require legacy document modes to display properly should be rewritten to use features defined by modern standards. To learn more, see Compatibility changes in IE11.
But have caveats:
Chrome profiles are not backwards compatible, so storing the user profile on a network drive and using it with different versions of Chrome can cause crashes and data loss.
References
Compatibility changes in IE11
IE10 Compatibility Changes
Specifying legacy document modes
When to use Legacy Document Modes
Understanding the need for document compatibility modes
HTML5 Parsing in IE10
IE 10 Compat Inspector
IE 10, HTML5 and jQuery 2.x - JavaScript runtime error: 'JSON' is undefined
Interoperable HTML Parsing in IE9
Compatibility View and 'Smart Defaults'
Chromium: Supported Directory Variables
As you know Firefox extensions can get broken when newer versions of FF are released, i.e. Firefox makes changes to extension requirements.
Is there a list/resource/forum board etc, that describes what these changes are?
Especially since many of the "getting started" tutorials were written along time ago. now it is hard to know which requirements have changed and which are still the same.
Each significant update is listed in the release notes for developers at https://developer.mozilla.org/en-US/Firefox/Releases. This includes information for web and add-on developers.
The best way to stay up-to-date is to follow the blog at https://blog.mozilla.org/addons/, which frequently publishes about changes affecting Add-on compatibility, AMO statistics and so on.
The reason I ask is mostly due to how Google Chrome installation works once you click the "Accept and install" button from Firefox. After you click the installation is started directly and when it's completed Chrome itself starts up.
Firefox does not show any "Save" or "Confirm" dialogs after you click the Install button (on Chrome install web page).
Now, is this standard behaviour? Or might it be due to having an old version of Chrome already on the computer (Note: The new version was still installed from Firefox).
Seems a bit risky to me, all you have to do is fool the user to click something and then you can do whatever you want on his machine, or? Personally I thought things like this only worked with IE/ActiveX.
Looking at the code of the chrome download page, they seem to be using three mechanisms:
Standard download
OneClick (using the google updater plugin)
ClickOnce (using the .NET Framework assistant plugin)
ClickOnce is widely available due to the pervasiveness of .NET 3.5 SP 1 (in which it is bundled).
This is absolutely not standard behaviour. It looks like it is some kind of extension in Firefox. This will not work in Opera, IE or Safari. For those they might use different methods. For IE maybe ActiveX. The rest just downloads a small setup file.
Microsoft has a propritary solution which is always included in their development programs, called ClickOnce. It needs .NET Framework. .NET Framework installs a Firefox extension for ClickOnce, and for everything else you can just run the setup.exe.
Google's updater is standard and open source, (called Omaha) but there are no open source server implementations as yet. It can be found here.
The way I understand it working is that when you download a file you trigger the updater with an ID and it takes care of the installation and maintenance of the program.
(speculative) I suspect the old installation or rather its updater took over at that point. As for the risk: If the Chrome guys did their homework (and I suspect they have), then Chrome will check for signatures on the file, etc. before running anything. That's standard behavior for updaters (sane ones, at least) and prevents abuse at that point.