Closed Bug 1522804 Opened 5 years ago Closed 5 years ago

keep support for about:config?filter=searchterm

Categories

(Toolkit :: Preferences, enhancement)

enhancement
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 1501450

People

(Reporter: aryx, Unassigned)

References

(Blocks 1 open bug)

Details

The old about:config supports passing in a search term as parameter with about:config?filter=searchterm

E.g. about:config?filter=useragent will only show preferences containing "useragent". That's handy in situations one has to tell somebody else what to do and can combine the instructions for opening about:config and searching into one step.

Duplicate of (regrettably WONTFIXed) https://bugzilla.mozilla.org/show_bug.cgi?id=1501450

I think this is mentioned on enough websites that we should continue to support it.

We explicitly decided to disallow deep linking into internal settings to reduce attack surface, present and potential.

To make a current example, "Open in New Tab" on an "about:config" link on the web works after a reload, even though the first load is disallowed. This probably wasn't foreseen originally, and we may have similar cases in the future.

Less steps for users isn't always better, see for example how the security certificate override dialogs are explicitly designed to slow down such operations. Deep linking into "about:config" to instruct users, for example, to disable those security checks in less steps could make it more attractive for attackers, and the link availability may seem like an official endorsement of the use case.

The fact this mentioned on some websites doesn't change the risk profile.

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.