{"id":8760,"date":"2019-11-11T08:15:14","date_gmt":"2019-11-11T16:15:14","guid":{"rendered":"http:\/\/blog.mozilla.org\/addons\/?p=8760"},"modified":"2019-11-08T08:14:50","modified_gmt":"2019-11-08T16:14:50","slug":"security-improvements-in-amo-upload-tools","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/","title":{"rendered":"Security improvements in AMO upload tools"},"content":{"rendered":"<p>We are making some changes to the submission flow for all add-ons (both AMO- and self-hosted) to improve our ability to detect malicious activity.<\/p>\n<p>These changes, which will go into effect later this month, will introduce a small delay in automatic approval for all submissions. The delay can be as short as a few minutes, but may take longer depending on the add-on file.<\/p>\n<p>If you use a version of <a href=\"https:\/\/extensionworkshop.com\/documentation\/develop\/getting-started-with-web-ext?utm_source=blog.mozilla.org&amp;utm_medium=post&amp;utm_campaign=security-improvements-in-amo-upload-tools\">web-ext<\/a> older than 3.2.1, or a custom script that connects to AMO\u2019s <a href=\"https:\/\/addons-server.readthedocs.io\/en\/latest\/topics\/api\/signing.html#upload-version?utm_source=blog.mozilla.org&amp;utm_medium=post&amp;utm_campaign=security-improvements-in-amo-upload-tools\">upload API<\/a>, this new delay in automatic approval will likely cause a timeout error. This does not mean your upload failed; the submission will still go through and be approved shortly after the timeout notification. Your experience using these tools should remain the same otherwise.<\/p>\n<p>You can prevent the timeout error from being triggered by updating web-ext or your custom scripts before this change goes live. We recommend making these updates this week.<\/p>\n<ul>\n<li><b><i>For web-ext<\/i><\/b>: update to <a href=\"https:\/\/github.com\/mozilla\/web-ext\/releases\/tag\/3.2.1?utm_source=blog.mozilla.org&amp;utm_medium=post&amp;utm_campaign=security-improvements-in-amo-upload-tools\">web-ext version 3.2.1<\/a>, which has a longer default timeout for `web-ext sign`. To update your global install, use the command `npm install -g web-ext`.<\/li>\n<li><b><i>For custom scripts that use the AMO upload API:<\/i><\/b> make sure your upload scripts account for potentially longer delays before the signed file is available. We recommend allowing up to 15 minutes.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>We are making some changes to the submission flow for all add-ons (both AMO- and self-hosted) to improve our ability to detect malicious activity. These changes, which will go into &hellip; <a class=\"go\" href=\"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/\">Read more<\/a><\/p>\n","protected":false},"author":1405,"featured_media":8108,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[44,121,227],"tags":[322921,322920],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Security improvements in AMO upload tools - Mozilla Add-ons Community Blog<\/title>\n<meta name=\"description\" content=\"New changes to the Firefox add-on submission flow will add a short delay in the automatic approval process. Update your tools now to prevent timeout errors.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Caitlin Neiman\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/\",\"url\":\"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/\",\"name\":\"Security improvements in AMO upload tools - Mozilla Add-ons Community Blog\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/addons\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.mozilla.org\/addons\/files\/2017\/03\/addons-puzzle-fox.png\",\"datePublished\":\"2019-11-11T16:15:14+00:00\",\"dateModified\":\"2019-11-08T16:14:50+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/addons\/#\/schema\/person\/d42e525583ec49a90da7806934fd533f\"},\"description\":\"New changes to the Firefox add-on submission flow will add a short delay in the automatic approval process. Update your tools now to prevent timeout errors.\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/#primaryimage\",\"url\":\"https:\/\/blog.mozilla.org\/addons\/files\/2017\/03\/addons-puzzle-fox.png\",\"contentUrl\":\"https:\/\/blog.mozilla.org\/addons\/files\/2017\/03\/addons-puzzle-fox.png\",\"width\":220,\"height\":220,\"caption\":\"Add-ons logo\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/addons\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security improvements in AMO upload tools\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/addons\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/addons\/\",\"name\":\"Mozilla Add-ons Community Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/addons\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/addons\/#\/schema\/person\/d42e525583ec49a90da7806934fd533f\",\"name\":\"Caitlin Neiman\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/addons\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/022ba856a87c8f40739b7ef2fdcdf33c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/022ba856a87c8f40739b7ef2fdcdf33c?s=96&d=mm&r=g\",\"caption\":\"Caitlin Neiman\"},\"description\":\"Add-ons Community Manager at Mozilla.\",\"url\":\"https:\/\/blog.mozilla.org\/addons\/author\/cneimanmozilla-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security improvements in AMO upload tools - Mozilla Add-ons Community Blog","description":"New changes to the Firefox add-on submission flow will add a short delay in the automatic approval process. Update your tools now to prevent timeout errors.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/","twitter_misc":{"Written by":"Caitlin Neiman","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/","url":"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/","name":"Security improvements in AMO upload tools - Mozilla Add-ons Community Blog","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/addons\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/#primaryimage"},"image":{"@id":"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.mozilla.org\/addons\/files\/2017\/03\/addons-puzzle-fox.png","datePublished":"2019-11-11T16:15:14+00:00","dateModified":"2019-11-08T16:14:50+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/addons\/#\/schema\/person\/d42e525583ec49a90da7806934fd533f"},"description":"New changes to the Firefox add-on submission flow will add a short delay in the automatic approval process. Update your tools now to prevent timeout errors.","breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/#primaryimage","url":"https:\/\/blog.mozilla.org\/addons\/files\/2017\/03\/addons-puzzle-fox.png","contentUrl":"https:\/\/blog.mozilla.org\/addons\/files\/2017\/03\/addons-puzzle-fox.png","width":220,"height":220,"caption":"Add-ons logo"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/addons\/2019\/11\/11\/security-improvements-in-amo-upload-tools\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/addons\/"},{"@type":"ListItem","position":2,"name":"Security improvements in AMO upload tools"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/addons\/#website","url":"https:\/\/blog.mozilla.org\/addons\/","name":"Mozilla Add-ons Community Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/addons\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/addons\/#\/schema\/person\/d42e525583ec49a90da7806934fd533f","name":"Caitlin Neiman","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/addons\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/022ba856a87c8f40739b7ef2fdcdf33c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/022ba856a87c8f40739b7ef2fdcdf33c?s=96&d=mm&r=g","caption":"Caitlin Neiman"},"description":"Add-ons Community Manager at Mozilla.","url":"https:\/\/blog.mozilla.org\/addons\/author\/cneimanmozilla-com\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/posts\/8760"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/users\/1405"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/comments?post=8760"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/posts\/8760\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/media\/8108"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/media?parent=8760"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/categories?post=8760"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/tags?post=8760"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}