搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

The configuration of an access to local files using by file protocol (file://)

  • 2 个回答
  • 1 人有此问题
  • 1 次查看
  • 最后回复者为 mosso

more options

I am an user of Firefox Quantum Extended Support Release 60.6.1esr (64-bit).

This is my first post to this question form.

My Question is about the configuration of an access to local files using by file protocol. In the default, accessing to local files is available. But I'm afraid about any security problems.

So I disabled file protocol by an operation bellow.

1.1. Displaying the detail configuration from "about:config"

1.2. Searching by the word "fileuri".

1.3. Changing the value of "browser.tabs.remote.separateFileUriProcess" to false from true.

1.4. Changing the value of "browser.tabs.remote.allowLinkedWebInFileUriProcess " to false from true.

Then I want to ask about this operation. There are three points.

2.1. I understood the method to disable an access to local files by using uri which's prefix is "file://". But It is not clear about an necessity of the operation discribed by 1.4.. From its preference name, I guesse it makes available to access to local files from links on the web. Is that right? and Is there a necessity of the operation discribed by 1.4.?

2.2. I suppose it might be a basic matter for users of firefox. But what kind of threats do we face in the case of being available to access to local files by using "file://"?

2.3. Are there any other operations we should do for security about firefox like this problem?

I am an user of Firefox Quantum Extended Support Release 60.6.1esr (64-bit). This is my first post to this question form. My Question is about the configuration of an access to local files using by file protocol. In the default, accessing to local files is available. But I'm afraid about any security problems. So I disabled file protocol by an operation bellow. 1.1. Displaying the detail configuration from "about:config" 1.2. Searching by the word "fileuri". 1.3. Changing the value of "browser.tabs.remote.separateFileUriProcess" to false from true. 1.4. Changing the value of "browser.tabs.remote.allowLinkedWebInFileUriProcess " to false from true. Then I want to ask about this operation. There are three points. 2.1. I understood the method to disable an access to local files by using uri which's prefix is "file://". But It is not clear about an necessity of the operation discribed by 1.4.. From its preference name, I guesse it makes available to access to local files from links on the web. Is that right? and Is there a necessity of the operation discribed by 1.4.? 2.2. I suppose it might be a basic matter for users of firefox. But what kind of threats do we face in the case of being available to access to local files by using "file://"? 2.3. Are there any other operations we should do for security about firefox like this problem?

由mosso于修改

所有回复 (2)

more options

I don't know how this works.

(please do not comment in bug reports
https://bugzilla.mozilla.org/page.cgi?id=etiquette.html
)

more options

Thank you cor-el!

But how should I understand this...the archives suggested is little bit technical for me...sorry.

How do I solve my question?

由mosso于修改