Skip to content

Certain devtool functions store website information in about:config

If you use inspect element/devtools on mullvad browser it is possible for certain information to be stored onto the disk in about:config.

The two examples I have are below; devtools.netmonitor.customRequest - It appears it stores any request you make within the network monitor. The information stored in this config can be a full HTTP request and could potentially include information that you do not want storing on disk such as passwords or tokens. devtools.debugger.pending-selected-location - It appears to potentially store breakpoint locations for different scripts.

Issue: https://github.com/mullvad/mullvad-browser/issues/243

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information