Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

web-ext run starts Firefox with many non-standard prefs set for no good reason #3176

Open
Rob--W opened this issue Jun 20, 2024 · 0 comments

Comments

@Rob--W
Copy link
Member

Rob--W commented Jun 20, 2024

web-ext sets many prefs that makes the browser not match reality. E.g. when I visit about:config, I noticed changes to security.fileuri.strict_origin_policy / security.fileuri.origin_policy, which results in an unrealistic same-origin policy for file:-URLs: for many years, the default is to have a strict policy, i.e. every file:-URL is cross-origin relative other file:-URLs, but the different default results in a weaker policy where local files can read from each other.

This pref is set at:

https://github.com/saadtazi/firefox-profile-js/blob/41ec759b24d71e5768ca114c8fef62bbe205cf3b/lib/firefox_profile.js#L50-L51

... there are many other prefs there, many of them obsolete (and not doing anything), others with questionable results. We should minimize the number of preferences, and make sure that if there are any, that we set them along with a comment in web-ext, at https://github.com/mozilla/web-ext/blob/a81ddc1c4fb09152ee4efd059643a2312d16e966/src/firefox/preferences.js

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant