Review Mozilla 1906260: Remove the -no-remote command line argument
Upstream is removing the flags to disable remoting (-no-remote) which we have a patch to set by default (Tor Browser-only).
This might be a linkability threat for Tor Browser (i.e., external app opening URLs on Tor Browser with some token that might link the user with the clearnet).
The easiest way to handle this is to intercept new URLs and have a prompt for them (it probably becomes a UX problem in this way). Maybe we can have a checkbox to dismiss that prompt. But maybe we shouldn't have it in the prompt itself, as someone might check it too carelessly.
Bugzilla: https://bugzilla.mozilla.org/show_bug.cgi?id=1906260 (thanks Thorin for spotting it!)
Fixed in Firefox 131.
Edited by Pier Angelo Vendrame