rvj wrote: > > this could return only read-only info ? > > e.g. list of packages currently installed and version info
InstallTrigger can give you version information about installed packages. It doesn't allow enumeration, but you can check for specific known packages that you might then update. This has some troubling privacy implications. It can be globally turned off by turning off XPInstall, but it would be better to hook it into something like the cookie-manager or capabilities system that could be set per site and which optionally asks first. -Dan Veditz
