{"json_modified": "2016-03-28T08:03:11.217397", "uuid": "dba0d0d8-ac69-4690-9b4a-91edc8d32d86", "title": "Bypassing Security Restrictions and Signing Code", "url": "/en-US/docs/Bypassing_Security_Restrictions_and_Signing_Code", "tags": ["Security", "Web Development"], "translations": [{"uuid": "1b91ba97-c12d-40ef-a6ed-e40bd714c175", "title": "Bypassing Security Restrictions and Signing Code", "url": "/ru/docs/Bypassing_Security_Restrictions_and_Signing_Code", "tags": [], "summary": "\u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Firefox \u043f\u043e\u0441\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u0435\u0431 \u0441\u0430\u0439\u0442\u0430\u043c, \u0440\u0430\u0437\u0434\u0435\u043b\u044f\u0442\u044c <a href=\"https://developer.mozilla.org/en-US/docs/Security_check_basics\">\u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435</a> \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u0438 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u044e\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u0434\u043b\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0432\u044b\u0437\u043e\u0432\u0430 <code>enablePrivelege</code>. \u042d\u0442\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 <strong>\u041c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u041f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439\u00a0</strong> \u0440\u0435\u0434\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f (\u0438\u0437-\u0437\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0439), \u0438 \u0438\u0445 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u044f\u0435\u0442 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u0441\u0442\u0440\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f. \u041f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u043e\u0442\u0434\u0435\u043b\u044f\u044e\u0442 \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043e \u0432 <a href=\"https://bugzilla.mozilla.org/show_bug.cgi?id=726125\" title=\"FIXED: Certificate of a signed extension is validated on each startup\">\u043e\u0448\u0438\u0431\u043a\u0430\u00a0726125</a>, <code>\u044d\u0442\u0430 enablePrivilege</code> \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u0430 \u0432 <a href=\"https://bugzilla.mozilla.org/show_bug.cgi?id=750859\" title=\"FIXED: Gut unused CAPS code\">\u043e\u0448\u0438\u0431\u043a\u0430\u00a0750859</a>, \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c <code>enablePrivilege</code> \u0441\u0430\u043c\u0430 \u043f\u043e \u0441\u0435\u0431\u0435 \u0431\u044b\u043b\u0430 \u043e\u0442\u043c\u0435\u043d\u0435\u043d\u0430 \u0432 <a href=\"https://bugzilla.mozilla.org/show_bug.cgi?id=757046\" title=\"FIXED: Investigate interim solutions for enablePrivilege\">\u043e\u0448\u0438\u0431\u043a\u0430\u00a0757046</a>.", "localization_tags": ["inprogress"], "locale": "ru", "last_edit": "2015-12-14T06:28:41", "review_tags": []}], "modified": "2014-03-21T07:56:51", "label": "Bypassing Security Restrictions and Signing Code", "localization_tags": [], "locale": "en-US", "id": 7095, "last_edit": "2013-06-23T13:06:07", "summary": "Early versions of Firefox allowed web sites to segregate <a href=\"https://developer.mozilla.org/en-US/docs/Security_check_basics\">principals</a> using signed scripts, and request extra permissions for scopes within signed scripts using a function called <code>enablePrivelege</code>. These <strong>Privilege Manager</strong> feature was not used much (aside from abuse), and its complexity made performance improvements difficult. Signed script segregation was removed in <a href=\"https://bugzilla.mozilla.org/show_bug.cgi?id=726125\" title=\"FIXED: Certificate of a signed extension is validated on each startup\">bug\u00a0726125</a>, the <code>enablePrivilege</code> prompt was removed in <a href=\"https://bugzilla.mozilla.org/show_bug.cgi?id=750859\" title=\"FIXED: Gut unused CAPS code\">bug\u00a0750859</a>, and <code>enablePrivilege</code> itself was nerfed in <a href=\"https://bugzilla.mozilla.org/show_bug.cgi?id=757046\" title=\"FIXED: Investigate interim solutions for enablePrivilege\">bug\u00a0757046</a>.", "sections": [{"id": "See_also", "title": "See also"}], "slug": "Bypassing_Security_Restrictions_and_Signing_Code", "review_tags": []}