Page 1 of 1
block file system browsing
Posted: Sun Apr 05, 2009 3:16 pm
by anthoy
How can I block file system browsing in Firefox 3 and Firefox 3.1 beta ?
I'd want to block
file://
resource:/
chrome:/
about:/
c:\
help me please
Thanks.
Re: block file system browsing
Posted: Sun Apr 05, 2009 4:25 pm
by Giorgio Maone
First of all, I'm not sure you really need to.
Linking from internet content to file:// and chrome: is already blocked by Gecko's built-in URI policy, and anyway cross-site leakage should be prevented (most of the time) by the usual same-site policy.
Stock blocking chrome: and resource: can be problematic for browser stability, too, anyway you may still want to try
https://addons.mozilla.org/en-US/firefox/addon/3145 (even though it's not marked as 3.1 compatible - yet?)
Re: block file system browsing
Posted: Sun Apr 05, 2009 4:49 pm
by therube
Re: block file system browsing
Posted: Mon Apr 06, 2009 8:48 am
by anthoy
Giorgio, thanks for information. I'll try this addon
therube, thanks for the usefull link
Re: block file system browsing
Posted: Thu Apr 09, 2009 5:03 am
by GµårÐïåñ
I know this is a bit late but wouldn't what the OP is asking be accomplished simply by going to about:config and finding the element noscript.mandatory and deleting its content which will make the items "deletable" or blockable in NoScript itself and that way the OP can just block it that way without adding new addon? Am I missing something?