Please consider add to whitelists *.xpi and *.crx extension as post attachment.