We will also continue supporting SDK add-ons as long as they don’t use require(‘chrome’) or some of the low-level APIs that provide access to XUL elements.
Seems like there's still a lot of power available, if you really want to dive in.
Seems like there's still a lot of power available, if you really want to dive in.
That kind of keyboard permission could be used for keyloggers though, it's not something every extension should get.
That's the powerful parts. The high-level APIs are fairly restrictive, quite similar to chrome APIs, maybe even less powerful on their own.
And with enforced signature signing you can't even distribute it to users yourself.
So effectively it will restrict extension-development to a whitelist of APIs. Everything else will be verboten, maybe with varying degrees of enforcement.
It certainly doesn't sounds like an open system to me.