Firefox Add-on Security Audit

Firefox Add-on permissions vs Chrome Manifest V3: security guide for AI tools.

How Mozilla Firefox's WebExtension permission model, Data Collection disclosures, and `about:addons` controls work for AI reading extensions like Vezz me.

Best fit

Best for Firefox users who care about browser privacy, open-web standards, and transparent extension permissions.

Technical Manifest Audit

Permission specification & risk profile.

Review how Chrome enforces Firefox WebExtension MV3 + Data Collection Disclosure in Manifest V3 and how to tell legitimate user-triggered extensions apart from intrusive tools.

Risk level: MediumFirefox WebExtension MV3 + Data Collection Disclosure
Chrome install-time warning
"Access your data for all websites" (in Firefox Add-ons prompt)
Manifest V3 declaration
"browser_specific_settings": {
  "gecko": {
    "id": "vezz-me@vezz.me",
    "strict_min_version": "140.0"
  }
}
Legitimate uses vs. red flags
What to verify before granting this permission to an AI browser tool.

Legitimate AI reading uses

  • Running the same on-screen selected-text answer panel natively inside Mozilla Firefox
  • Declaring transparent Firefox Data Collection permissions (`authenticationInfo`, `websiteContent`, `websiteActivity`)

Red flags to watch for

  • Extensions that only support Chromium and force Firefox users to switch browsers
  • Extensions that obfuscate code to evade Mozilla Add-on (AMO) review
Step-by-step workflow

How to run this workflow in place.

1

Check Mozilla's Data Collection disclosure section

Firefox's Manifest V3 schema includes explicit `data_collection_permissions` metadata so users know upfront what categories of data an add-on processes.

2

Manage per-site permissions in about:addons

In Firefox, open `about:addons`, click the extension, and inspect the 'Permissions and Data' tab at any time.

3

Choose your context level inside Vezz me

Set Page Context to `Minimal`, `Basic`, or `Detailed` directly in the Firefox toolbar popup.

Key details

Why this approach works better than switching tabs.

Why Firefox users love user-triggered extensions
Firefox users choose Mozilla specifically to avoid surveillance-heavy browser defaults.
  • Vezz me never collects a browsing-history log in Firefox or Chrome
  • Zero background network requests while you browse
  • Works smoothly alongside Firefox Multi-Account Containers and Enhanced Tracking Protection
Frequently asked questions

Common questions about firefox add-on security audit.

Does Vezz me work inside Firefox Multi-Account Containers?

Yes! Vezz me works inside standard tabs and Firefox Multi-Account Container tabs whenever you highlight text and press your shortcut.

Related workflows & guides

Explore connected pages.

Available for Chrome and Firefox

Ready to try this workflow on your own reading?

Install Vezz me free, highlight text on any webpage, and press your customizable shortcut (default: Ctrl+Shift+X or Cmd+Shift+X on Mac) to get an answer right beside the source.