de Philipp Kewisch (desarrollador) el Abr. 29, 2026 · enlace permanente

Yep, I know that warning is horrible. It is theoretically true, so it is good that Thunderbird is warning users. However, let me explain:

There is no sandboxed API available in Thunderbird right now for calendaring, also known as WebExtensions API. Given there is no such API, I need to make use of an "Experiment API", which basically gives me unrestricted access to Thunderbird's internal code.

Thunderbird's internal code is very versatile, because it is a full fledged application built on the same framework as Firefox. It has various utility methods, such as being able to execute processes. In theory, an add-on could leverage this to...remove all your files? At least those that Thunderbird has access to.

I'm actively working to integrate a sandbox API into Thunderbird, which would allow me to stop using Experiments and hence just ask for a more limited set of permissions.

You can review the code on github (see links on the add-ons page), or by unzipping the xpi file you download. I'm not actually deleting files :-)

Hope this helps!