Add-on Review Questions

OK now I am seriously disturbed.

Hi! Our security mechanism scans submissions to identify and react to potentially malicious add-ons. These can be held for manual review. We’ve been dealing with some issues on our end that are causing delays for add-ons selected for manual review, but we are working as quickly as possible to review submissions in the queue.

I understand the security mechanisms. I don’t understand why an add-on that has 1 line of code: “console.log (‘Hello World!’);” with permissions set “proxy” goes to manual review :). Maybe you can explain how 1 line of code is supposed to be malicious to get it for manual review?

2 Likes

Hi @caitlin,

This has been going on for more that two months now. We need some questions answered. I get that you @caitlin might not have the answers we need, so if you cannot supply them, then can you please get someone from Mozilla who can to respond to these questions, or tell us who to contact who can answer these questions.

  1. What is the workaround (if any) that we can use to prevent our UNLISTED addons from being added to the manual queue?

  2. What exactly has caused this problem (lots of addons, even unlisted addons, being added to the manual review queue) to occur?

  3. What, if anything, Mozilla is doing about removing our addons from the manual review queue?

Please answer these questions with more than

We’ve been dealing with some issues on our end that are causing delays for add-ons selected for manual review, but we are working as quickly as possible to review submissions in the queue.

1 Like

Well that’s 100% possible. Silly to attempt, but possible. More importantly, potentially amenable to automatic scanning.

Please check review my addon https://addons.mozilla.org/en-US/developers/addon/240b907f726e4c479e05/versions . It has been 2 days. Thanks.

Hi,
For several weeks I have been trying to sign a new version of my addon (not listed) but without success. I receive an email telling me that it may take several days but after more than 4 weeks the addon still has not signed.
I tried to re-upload other versions and even create a new addon but unfortunately it is still not signed even though they are undistributed versions each time.
Usually signing an undistributed (unlisted) version only takes a few minutes. Can someone help me please?

Thanks for reaching out, @Nguyen_Huu_Qui. We’re still unfortunately experiencing some issues that are causing delays for extensions selected for manual review. We are working to resolve those issues; in the meantime, I’ll flag your add-on for the review team with the hopes that they can get to it soon.

Hi,
My add-on has passed 2 months and still has not been reviewed. Can you help me? https://addons.mozilla.org/zh-CN/firefox/addon/scriptcat/

1 Like

Hi
What are the conditions that require a manual review?

Hi @rmiyai, generally speaking, your add-on may be flagged for manual review if it looks like it might be doing something potentially unsafe for users. The Add-on Policies & How To Build a Secure Extension articles on Firefox Extension Workshop touch on some of the things we look for.

2 Likes

@caitlin Can you answer my question?

I dislike piling on with the same question but can we please get some kind of response for what is going on with unlisted addons?

The delay for listed extensions is annoying but understandable considering manual reviews but unlisted ones have always been automated and were signed in a few minutes. Even a few days delay breaks my releases as I have my unlisted beta version set up to get signed and distributed automatically and usually a few days let alone weeks/months are enough for it to get out of date.

The approval time does seem to be improved for these, at least I do not have any that have been waiting for 2 months any longer, but I am failing to see why these keep getting kicked to manual review when no issues are reported to me about the extension.

Due to this I have currently stopped supporting Firefox at all for my beta versions which impacts my ability to get features tested by more than myself or any other tech savvy users who can build the extension from source code.

I would really appreciate some kind of response other than “Let me see if I can get your extension moved up the queue” which has been basically what all of them have been

3 Likes

More than 2 months…
@caitlin Any response?

To all developers who are waiting for manual review unlisted extensions: make a copy of your addon but no proxy permission :slight_smile: It will be automatically accepted in 5 minutes. Second test: make an empty extension without any code but it will add a proxy extension - it will never be automatically accepted :slight_smile:

I don’t use the proxy permission in my extension

2 Likes

@caitlin My addon is still in “awaiting review” status since 20 days. Please check https://addons.mozilla.org/en-US/developers/addon/240b907f726e4c479e05/versions

@caitlin We been waiting for a review since July 16. I have been continuously trying to communicate with your team with no response.

https://addons.mozilla.org/developers/addon/stubtabsff/versions

Please review this and allow us to update our app

I’ll take your word for it. I literally cannot release my add on or indeed perform the very most basic function my add on is intended to carry out without the proxy permission.

Hello again. My add-on “Mini Proxy” still awaiting verification over 3 months. :thinking: It’s not funny anymore. Do something about it. :face_with_raised_eyebrow: