评分3星，满分5星

由 corvuscorax2 发表于 April 25, 2010 ·

This extension is absolutely awesome, the ability to write, share and add new buttons is outstanding. It also is really cool for hackers/developers because it provides a shortcut into firefox extension writing for anyone who'd always wanted to but had feared the learning curve. With this extension you can create your own firefox extension literally by clicking on a button!

BUT

The security implications are considerate. I wrote a few buttons by now, and I have to say, a button can do absolutely anything!
A hacker could modify the behaviour of other buttons installed, change the way the custombuttons² extension works (to prevent uninstalling a button for example or hide that its still there) and change firefox behaviour visibly and invisibly. You could write a basically harmless and useful button, which one year in the future loads additional code from a URL that then spies out your VISA card # every time u enter it on a webpage and sends it to a russian/chinese server.

Buttons are just links, not signed and not trustworthy, yet with all the power of a full fledged firefox extension. Keep that in mind when installing buttons, and always, always, review their code (Which I think is one of the best features of custombuttons2, you can view the code in the rightclick menu of the button install link without installing it :))

I'd give you five stars for this cool extension, but damn, I have the feeling by installing it I just opened Pandora's box >:>>>

@developers. your webpage is down again!