New Tab source preference can be hijacked

NEW
Unassigned

Status

Content Services Graveyard
Tiles
3 years ago
3 years ago

People

(Reporter: Marc Schifer [mschifer], Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

3 years ago
The preference for the New Tab page, browser.newtabpage.directory.source could be set to a non Mozilla source allowing third parties to serve data to the new tab page.

We should have some means of validating the the Net Tab page content is from a trusted source.
You need to log in before you can comment on or make changes to this bug.