1643174 - Remove "whitelist" from sandboxing preferences

Status: NEW

(Core :: Security: Process Sandboxing, enhancement, P1)

Description

[Gian-Carlo Pascutto [:gcp]]

https://wiki.mozilla.org/Security/Sandbox#Customization_Settings

--> safelist (allowlist?) / blocklist

We'll need to keep reading the old prefs though so as not to break any existing configs.

Comment 1

[:Gijs (he/him)]

(In reply to Gian-Carlo Pascutto [:gcp] from comment #0)

https://wiki.mozilla.org/Security/Sandbox#Customization_Settings

--> safelist (allowlist?) / blocklist

We'll need to keep reading the old prefs though so as not to break any existing configs.

We can do a one-time migration in BrowserGlue.jsm to migrate to the new pref during an update.

Comment 2

[Jed Davis [:jld] ⟨⏰|UTC-8⟩ ⟦he/him⟧]

In general I prefer “allowlist” over “safelist” for sandboxing: sometimes we have to allow things that aren't safe because it's not (yet) feasible to disallow them.