Package: firefox
Version: 63.0.3-1
Severity: normal

Hello,

   * What led up to the situation?

         I went to https://youtube.com/ using the address bar.

   * What was the outcome of this action?

Firefox displayed a recommandation (an ad) for a non-free extension: "Enhancer for YouTube™". An blue icon appeared at the right of the address bar. Upon click, a bubble invites the user to install the extension without any warning on the license of the extension.

        The addon page says "Custom license".
The license says: "The Developer grants You the right to use Enhancer for YouTube™ with any of the compatible Google Services" And: "Except Authorized Persons, nobody has the right to distribute Enhancer for YouTube" And also: "Except where otherwise noted, and except Authorized Persons, nobody (i) has the right to reverse-engineer, modify, reproduce, copy, duplicate, or use any part of the Source Code without The Developer's consent, neither "as-is" nor modified; (ii) has the right to distribute or in any way expose the Source Code over the web without The Developer's consent. All rights not expressly granted to You are retained by The Developer."

   * What outcome did you expect instead?

I expected Firefox as shipped in Debian not to spontaneously recommand (show an intrusive ad) for a non-free extension. Until now, I trusted Firefox and its UI to provide good advice to users.

   * Addons currently installed on my profile:
        - ADB Helper
        - Grammalecte
        - I don't care about cookies
        - KDE Connect
        - Plasma Integration
        - Save Tabs
        - Tree Style Tabs
        - uBlock Origin
        - uMatrix (disabled)

I cannot seem to reproduce the issue on my current profile or a new profile.
    I do have a screenshot if needed.

-- Package-specific info:


-- Addons package information

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.18.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8), LANGUAGE= (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages firefox depends on:
ii  debianutils               4.8.6
ii  fontconfig                2.13.1-2
ii  libasound2                1.1.7-1+b1
ii  libatk1.0-0               2.30.0-1
ii  libc6                     2.27-8
ii  libcairo-gobject2         1.16.0-1
ii  libcairo2                 1.16.0-1
ii  libdbus-1-3               1.12.10-1
ii  libdbus-glib-1-2          0.110-3
ii  libevent-2.1-6            2.1.8-stable-4
ii  libffi6                   3.2.1-9
ii  libfontconfig1            2.13.1-2
ii  libfreetype6              2.9.1-3
ii  libgcc1                   1:8.2.0-9
ii  libgdk-pixbuf2.0-0        2.38.0+dfsg-6
ii  libglib2.0-0              2.58.1-2
ii  libgtk-3-0                3.24.1-2
ii  libjsoncpp1               1.7.4-3
ii  libnspr4                  2:4.20-1
ii  libnss3                   2:3.40-1
ii  libpango-1.0-0            1.42.4-4
ii  libsqlite3-0              3.25.3-2
ii  libstartup-notification0  0.12-5
ii  libstdc++6                8.2.0-9
ii  libvpx5                   1.7.0-3
ii  libx11-6                  2:1.6.7-1
ii  libx11-xcb1               2:1.6.7-1
ii  libxcb-shm0               1.13.1-1
ii  libxcb1                   1.13.1-1
ii  libxcomposite1            1:0.4.4-2
ii  libxdamage1               1:1.1.4-3
ii  libxext6                  2:1.3.3-1+b2
ii  libxfixes3                1:5.0.3-1
ii  libxrender1               1:0.9.10-1
ii  libxt6                    1:1.1.5-1
ii  procps                    2:3.3.15-2
ii  zlib1g                    1:1.2.11.dfsg-1

Versions of packages firefox recommends:
ii  libavcodec57  7:3.4.3-1
ii  libavcodec58  7:4.0.3-1

Versions of packages firefox suggests:
ii  fonts-lmodern          2.004.5-5
ii  fonts-stix [otf-stix]  1.1.1-4
ii  libcanberra0           0.30-6
ii  libgssapi-krb5-2       1.16.1-1
ii  libgtk2.0-0            2.24.32-3
ii  pulseaudio             12.2-2

-- no debconf information

Reply via email to