Security/Safe Browsing: Difference between revisions
(→Bugs: mention the new product/component) |
(add a QA section with a bunch of test URLs) |
||
| Line 26: | Line 26: | ||
** <tt>toolkit/components/url-classifier/</tt> (includes the list manager) | ** <tt>toolkit/components/url-classifier/</tt> (includes the list manager) | ||
* [https://github.com/mozilla/itisatrap itisatrap.org] test pages | * [https://github.com/mozilla/itisatrap itisatrap.org] test pages | ||
== QA == | |||
* [http://itisatrap.org/firefox/its-an-attack.html Malware], [http://itisatrap.org/firefox/its-a-trap.html phishing] and [http://itisatrap.org/firefox/unwanted.html unwanted software] test pages | |||
* [http://phishtank.com/ Phishtank] (real phishing sites) | |||
* [http://testsafebrowsing.appspot.com Google test pages] | |||
== Telemetry == | == Telemetry == | ||
Revision as of 08:08, 17 April 2015
Note: The Safe Browsing feature in Firefox has been renamed to Phishing Protection, but it's still now as Safe Browsing internally.
Overview
Google Safe Browsing was an anti-phishing extension released by Google on labs.google.com in December 2005. Google has released this extension to the Mozilla Foundation under MPL 1.1/GPL 2.0/LGPL 2.1 in order that it might be used as part of Firefox if desired.
We've landed this change on the trunk as a global extension as of 7 March 2006. The next steps are to figure out whether this is something we want to use as the base for an anti-phishing feature in Firefox. Of course, whether it is enabled or even shipped is still a matter for discussion, as is the final form the extension might take, its UI, the way users opt-in, and the like.
You can read the discussion that lead up to to its integration in https://bugzilla.mozilla.org/show_bug.cgi?id=329292
How to Enable
safebrowsing is enabled by default on the MOZILLA_1_8_BRANCH and trunk. You can enable/disable it in the Options dialog in the Security tab.
If you wish to see debugging output, open toolkit/components/url-classifier/src/nsUrlClassifierLib.js and set G_GDEBUG to true.
Documentation
Source Code
- The Firefox implementation is split into two parts:
- browser/components/safebrowsing/
- toolkit/components/url-classifier/ (includes the list manager)
- itisatrap.org test pages
QA
- Malware, phishing and unwanted software test pages
- Phishtank (real phishing sites)
- Google test pages
Telemetry
Dashboard: https://people.mozilla.org/~fmarier/safebrowsing-dashboard/
Bugs
- Tracking bug
- Product/Component: Toolkit/Safe Browsing
You can also look at bugs under Firefox / Phishing Protection.