Commit d75b79f6 authored by Georg Koppen's avatar Georg Koppen
Browse files

Bug 23044: Don't allow GIO supported protocols by default

parent 3dc15d32

browser/app/profile/000-tor-browser.js

+3 −0
Original line number Diff line number Diff line
@@ -209,6 +209,9 @@ pref("network.protocol-handler.warn-external.mailto", true); 
pref("network.protocol-handler.warn-external.news", true);

pref("network.protocol-handler.warn-external.nntp", true);

pref("network.protocol-handler.warn-external.snews", true);

// Make sure we don't have any GIO supported protocols (defense in depth

// measure)

pref("network.gio.supported-protocols", "");

pref("plugin.disable", true); // Disable to search plugins on first start

pref("plugins.click_to_play", true);

pref("plugin.state.flash", 1);

extensions/gio/nsGIOProtocolHandler.cpp

+4 −4
Original line number Diff line number Diff line
@@ -922,16 +922,16 @@ nsGIOProtocolHandler::InitSupportedProtocolsPref(nsIPrefBranch *prefs) 
  // Get user preferences to determine which protocol is supported.

  // Gvfs/GIO has a set of supported protocols like obex, network, archive,

  // computer, dav, cdda, gphoto2, trash, etc. Some of these seems to be

  // irrelevant to process by browser. By default accept only smb and sftp

  // protocols so far.

  // irrelevant to process by browser. By default accept none.

  nsresult rv = prefs->GetCharPref(MOZ_GIO_SUPPORTED_PROTOCOLS,

                                   getter_Copies(mSupportedProtocols));

  if (NS_SUCCEEDED(rv)) {

    mSupportedProtocols.StripWhitespace();

    ToLowerCase(mSupportedProtocols);

  }

  else

    mSupportedProtocols.AssignLiteral("smb:,sftp:"); // use defaults

  else {

    mSupportedProtocols.AssignLiteral(""); // use none by default

  }



  LOG(("gio: supported protocols \"%s\"\n", mSupportedProtocols.get()));

}