Closed Bug 1574396 Opened 5 years ago Closed 5 years ago

Software can modify firefox homepage via command line

Categories

(Toolkit :: Startup and Profile System, defect)

Unspecified
Windows
defect
Not set
normal

Tracking

()

RESOLVED WONTFIX

People

(Reporter: xuyuehang, Unassigned)

Details

Attachments

(2 files)

Attached image kingsoft option

Kingsoft Internet Security is an anti-virus software in China. There is a option locks the browser homepage. When it is turned on, it will force to change firefox homepage. Because this software will imply the user to lock the homepage through some pop-ups. So many users have turned this option on without knowing it.

System environment: Windows 10, Firefox 68.0.2

The manual turn on steps are as follows:

  1. Visit the Kingsoft Internet Security website to download and install
    Official website: http://www.ijinshan.com/
    Download address: http://cd002.www.duba.net/duba/install/2011/ever/kinst_150_1_20170912.exe
  2. Start Kingsoft, follow the attachment to complete the operation.
  3. At this point if your firefox shortcut doesn't add any command line option, firefox homepage has been modified.

Use process explorer to see that the command line for firefox has been added with a URL [see attachment].
Starting from the firefox installation directory, the homepage won't be change. This problem only occurs when starting from a shortcut.

Being able to pass a url to open on Firefox's command line is fully intentional and supported. As well as allowing users to do so this is vital for allowing external applications to open links in Firefox. Unfortunately we have no way of stopping other applications from modifying Firefox's shortcut once installed on your computer.

Status: NEW → RESOLVED
Closed: 5 years ago
No longer depends on: IDEF2595
Resolution: --- → WONTFIX

Hello Dave. I understand what you mean by passing the URL to the browser via the command line. But I am not sure if it is the same as the one I am talking about.
In the above example, the user set up the browser homepage through Kingsoft's software. But this setting is not shown in any relevant interface of Firefox (shortcut, performance, etc.). Plus, as I mentioned above, users often turn this option on without knowing it. The most intuitive feeling is: the user finds that starting Firefox isn't the homepage was previously set, but other site.
The result of this problem (problem performance) is I can see he URL was added after the Firefox process. But I don't know how to add it. The user doesn't click on a link, the way to pass the url, but double-click the shortcut to launch Firefox. If it is convenient, you can try to install this software on the virtual machine.

I uploaded an operation screen recording: https://drive.google.com/file/d/14vvN-ECQCZK69H53tJ1ONb7cfXF0MQ8Y/view?usp=sharing

Kingsoft is not modifying Firefox's homepage setting in any way that Firefox can see. It is just modifying the shortcut used to launch Firefox, making it tell Firefox to open a specific URL which bypasses Firefox's homepage setting. Firefox cannot tell that it was started from a shortcut and so has no way to show the user what is happening. All Firefox sees is the command line arguments it is launched with which are the same arguments used when other applications try to open a link.

You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: