Open
Bug 1345643
Opened 9 years ago
Updated 3 years ago
about:preferences#containers accessible via URL even though privacy.userContext.enabled;false
Categories
(Firefox :: Settings UI, enhancement, P3)
Tracking
()
NEW
| Tracking | Status | |
|---|---|---|
| firefox52 | --- | wontfix |
| firefox53 | --- | affected |
| firefox54 | --- | affected |
| firefox55 | --- | affected |
| firefox57 | --- | fix-optional |
People
(Reporter: kjozwiak, Unassigned)
References
(Blocks 1 open bug)
Details
(Whiteboard: [domsecurity-backlog3][userContextId])
As mentioned in bug#1340993comment#4, even though "privacy.userContext.ui.enabled;false" or "privacy.userContext.enabled;false", users will still be able to access "about:preferences#containers" via the URL even though the feature is disabled. This is a pretty rare edge case as the user needs to know exactly what they're looking for to access that portion of the preferences when containers are disabled.
If either of the above prefs are set as "false", we should make "about:preferences#containers" inaccessible to the user.
STR:
* download a channel where containers is currently disabled by default
* type in about:preferences#containers into the URL
You'll notice that you'll be able to remove/edit containers even though the feature is technically disabled via prefs.
Comment 1•9 years ago
|
||
Mass wontfix for bugs affecting firefox 52.
Comment 2•9 years ago
|
||
Bulk change per https://bugzilla.mozilla.org/show_bug.cgi?id=1401020
status-firefox57:
--- → fix-optional
Updated•3 years ago
|
Severity: normal → S3
You need to log in
before you can comment on or make changes to this bug.
Description
•