block file system browsing

Talk about internet security, computer security, personal security, your social security number...
Post Reply
anthoy
Posts: 9
Joined: Sun Apr 05, 2009 3:01 pm

block file system browsing

Post by anthoy »

How can I block file system browsing in Firefox 3 and Firefox 3.1 beta ?
I'd want to block
file://
resource:/
chrome:/
about:/
c:\

help me please
Thanks.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b3) Gecko/20090305 Firefox/3.1b3
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: block file system browsing

Post by Giorgio Maone »

First of all, I'm not sure you really need to.
Linking from internet content to file:// and chrome: is already blocked by Gecko's built-in URI policy, and anyway cross-site leakage should be prevented (most of the time) by the usual same-site policy.
Stock blocking chrome: and resource: can be problematic for browser stability, too, anyway you may still want to try https://addons.mozilla.org/en-US/firefox/addon/3145 (even though it's not marked as 3.1 compatible - yet?)
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8 (.NET CLR 3.5.30729)
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: block file system browsing

Post by therube »

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b4pre) Gecko/20090328 SeaMonkey/2.0b1pre
anthoy
Posts: 9
Joined: Sun Apr 05, 2009 3:01 pm

Re: block file system browsing

Post by anthoy »

Giorgio, thanks for information. I'll try this addon
therube, thanks for the usefull link
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8 (.NET CLR 3.5.30729)
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3365
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: block file system browsing

Post by GµårÐïåñ »

I know this is a bit late but wouldn't what the OP is asking be accomplished simply by going to about:config and finding the element noscript.mandatory and deleting its content which will make the items "deletable" or blockable in NoScript itself and that way the OP can just block it that way without adding new addon? Am I missing something?
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8 NoScript/1.9.1.7 FlashGot/1.1.8.5 FirePHP/0.2.4
Post Reply