Open Bug 1769345 Opened 2 years ago Updated 2 years ago

URL should be passed to the firefox command on standard input rather than argument, for security

Categories

(Toolkit :: Startup and Profile System, enhancement)

Desktop
Linux
enhancement

Tracking

()

UNCONFIRMED

People

(Reporter: vincent-moz, Unassigned)

Details

The current usage as described by "firefox --help" is

Usage: firefox [ options ... ] [URL]

i.e. the URL is passed as an argument. However, this is not secure as other users of the machine can see the URL, e.g. with the "ps" utility. Instead, there should be an option tell firefox to read the URL on the standard input (for instance, it can be passed via a pipe).

Severity: -- → N/A
You need to log in before you can comment on or make changes to this bug.