Skip to content

TB11 window.name

window.name [1] protection added in FF82 is missing in TB11, but has been enabled by default in Firefox since FF86 (including ESR91)

For some reason this is default false in TB

/* enforce "window.name" protection [FF82+]
 * If a new page from another domain is loaded into a tab, then window.name is set to an empty string. The original
 * string is restored if the tab reverts back to the original page. This change prevents some cross-site attacks
 * [TEST] https://arkenfox.github.io/TZP/tests/windownamea.html ***/
user_pref("privacy.window.name.update.enabled", true); // [DEFAULT: true]

[1] https://blog.mozilla.org/security/2021/04/19/firefox-88-combats-window-name-privacy-abuses/ - IDK why they say FF88 ¯\_(?)_/¯

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information