Skip to content

Commit

Permalink
Addressed review actions from nvaccess#16311
Browse files Browse the repository at this point in the history
  • Loading branch information
Adriani90 committed Mar 17, 2024
1 parent 19c734b commit 177633d
Showing 1 changed file with 2 additions and 4 deletions.
6 changes: 2 additions & 4 deletions user_docs/en/userGuide.t2t
Original file line number Diff line number Diff line change
Expand Up @@ -321,7 +321,7 @@ Before you're able to press the Continue button you will have to use the checkbo
There will also be a button present to review the add-ons that will be disabled.
Refer to the [incompatible add-ons dialog section #incompatibleAddonsManager] for more help on this button.
After installation, you are able to re-enable incompatible add-ons at your own risk from within the [Add-on Store #AddonsManager].
But note that add-ons might introduce vulnerabilities, so check out the [note on security and privacy #AddonSecurityandPrivacy] to make sure you have all information needed before installing them.
Note that add-ons might introduce vulnerabilities, so check out the [note on security and privacy #AddonSecurityandPrivacy] to make sure you have all information needed before installing them.

+++ Use NVDA during sign-in +++[StartAtWindowsLogon]
This option allows you to choose whether or not NVDA should automatically start while at the Windows sign-in screen, before you have entered a password.
Expand Down Expand Up @@ -2931,15 +2931,14 @@ Installing add-ons in NVDA leads to integration of external code into NVDA's fun
Add-ons can also use external libraries and third party services to serve the purpose and provide the features for which they have been developed.
Add-ons can be developed by every person or company, and the review process for these external feature providers happens when they are submitted to the NVDA’s official add-on store.

The review process of add-ons is still in development, so most of add-ons are not officially reviewed yet.
The review process of add-ons is still in development, so most of add-ons are not reviewed yet.
However, many add-ons have discussions areas where users can exchange feedback. The [community review area #AddonStoreReviews] can be accessed via the actions menu of the add-on.

Installed Add-ons or extensions (not only in NVDA) might in general introduce security and/or privacy vulnerabilities, depending on the permissions they need and actions they perform in order to provide the desired functionality.
Risks can be e.g.
- Insecure network connections
- Files stored with insecure file permissions or in an unprotected location
- Sensitive information written to an easily available log file
- Web browser vulnerabilities
- Vulnerabilities in third-party libraries
- Cryptographic vulnerabilities, and more.
-
Expand All @@ -2949,7 +2948,6 @@ Users install NVDA add-ons at their own risk. Therefore, everyone should be awar
- Read the description carefully. Does the add-on need questionable permissions? Does it track data? Does it share sensitive data with other sources that you don’t trust?
- Check out the [community reviews #AddonStoreReviews] for the add-on. Are there any complaints about the add-on? Are there any reports about data being taken, or for anything that makes you feel unsafe?
- The risk of vulnerabilities increases the more add-ons you installed. So be careful to keep the overview of the sources your add-ons come from.
- If possible, check the permissions the add-on requests. If you don’t feel safe about a permission the add-on needs, maybe it is better to uninstall it.
-

++ Browsing add-ons ++[AddonStoreBrowsing]
Expand Down

0 comments on commit 177633d

Please sign in to comment.