Phishing Protection

From MozillaWiki
Jump to: navigation, search

Name Change

Note: Safe Browsing has been renamed to Phishing Protection.


Google Safe Browsing was an anti-phishing extension released by Google on in December 2005. Google has released this extension to the Mozilla Foundation under MPL 1.1/GPL 2.0/LGPL 2.1 in order that it might be used as part of Firefox if desired.

We've landed this change on the trunk as a global extension as of 7 March 2006. The next steps are to figure out whether this is something we want to use as the base for an anti-phishing feature in Firefox. Of course, whether it is enabled or even shipped is still a matter for discussion, as is the final form the extension might take, its UI, the way users opt-in, and the like.

You can read the discussion that lead up to to its integration in

How to Enable

safebrowsing is enabled by default on the MOZILLA_1_8_BRANCH and trunk. You can enable/disable it in the Options dialog in the Security tab.

If you wish to see debugging output, open toolkit/components/url-classifier/src/nsUrlClassifierLib.js and set G_GDEBUG to true.

Design Doc

Phishing Protection: Design Documentation

Server Spec

Phishing Protection: Server Spec

Client Spec

Phishing Protection: Client Spec

Source Code

For integration with firefox, the code from the extension is broken into two parts:

The browser component contains the Phishing Warden, Controller, Browser View and Displayer described on the Phishing_Protection:_Design_Documentation#Major_Abstractions page. The toolkit component contains the ListManager and TRTables.



Important Bugs

Other Bugs or Potential Improvements

Are filed as bugs under Firefox / Phishing Protection