Confirmed users
908
edits
Security/Safe Browsing: Difference between revisions
Jump to navigation
Jump to search
→Prefs: mention new pref layout
(→Engineering: add a walkthrough and mention the code in necko) |
(→Prefs: mention new pref layout) |
||
| Line 13: | Line 13: | ||
* <tt>browser.safebrowsing.debug</tt>: show debugging info from the JavaScript list update code on the command line | * <tt>browser.safebrowsing.debug</tt>: show debugging info from the JavaScript list update code on the command line | ||
* <tt>browser.safebrowsing.enabled</tt>: enable '''phishing''' protection | * <tt>browser.safebrowsing.enabled</tt>: enable '''phishing''' protection | ||
* <tt>browser.safebrowsing.id</tt>: what SAFEBROWSING_ID in <tt>gethashURL</tt> and <tt>updateURL</tt> maps to | * <tt>browser.safebrowsing.id</tt>: what SAFEBROWSING_ID in <tt>gethashURL</tt> and <tt>updateURL</tt> maps to | ||
* <tt>browser.safebrowsing.malware.enabled</tt>: enable '''malware''' protection | * <tt>browser.safebrowsing.malware.enabled</tt>: enable '''malware''' protection | ||
* <tt>browser.safebrowsing.reportMalwareMistakeURL</tt>: destination for the "This isn't an attack site" button (after ignoring the interstitial warning) | * <tt>browser.safebrowsing.reportMalwareMistakeURL</tt>: destination for the "This isn't an attack site" button (after ignoring the interstitial warning) | ||
* <tt>browser.safebrowsing.reportPhishMistakeURL</tt>: destination for the "This isn't a web forgery" button (after ignoring the interstitial warning) | * <tt>browser.safebrowsing.reportPhishMistakeURL</tt>: destination for the "This isn't a web forgery" button (after ignoring the interstitial warning) | ||
* <tt>browser.safebrowsing.reportPhishURL</tt>: destination for the "Help | Report Web Forgery" menu item | * <tt>browser.safebrowsing.reportPhishURL</tt>: destination for the "Help | Report Web Forgery" menu item | ||
* <tt>urlclassifier.disallow_completions</tt>: list of tables for which we never call <tt>gethash</tt> | * <tt>urlclassifier.disallow_completions</tt>: list of tables for which we never call <tt>gethash</tt> | ||
* <tt>urlclassifier.gethashnoise</tt>: the number of fake entries to add to any <tt>gethash</tt> calls | * <tt>urlclassifier.gethashnoise</tt>: the number of fake entries to add to any <tt>gethash</tt> calls | ||
| Line 26: | Line 23: | ||
* <tt>urlclassifier.max-complete-age</tt> | * <tt>urlclassifier.max-complete-age</tt> | ||
* <tt>urlclassifier.phishTable</tt>: list of tables to use when looking for phishing (they need to be named <tt>*-phish-*</tt>) | * <tt>urlclassifier.phishTable</tt>: list of tables to use when looking for phishing (they need to be named <tt>*-phish-*</tt>) | ||
Firefox 42 and earlier: | |||
* <tt>browser.safebrowsing.gethashURL</tt>: server endpoint for completions of malware and phishing lists | |||
* <tt>browser.safebrowsing.malware.reportURL</tt>: probably unused | |||
* <tt>browser.safebrowsing.updateURL</tt>: server endpoint for malware and phishing list updates | |||
Firefox 43 and later: | |||
* <tt>browser.safebrowsing.provider.google.gethashURL</tt>: server endpoint for completions of malware and phishing lists | |||
* <tt>browser.safebrowsing.provider.google.lists</tt>: list of tables coming from the Mozilla shavar service | |||
* <tt>browser.safebrowsing.provider.google.reportURL</tt>: probably unused | |||
* <tt>browser.safebrowsing.provider.google.updateURL</tt>: server endpoint for malware and phishing list updates | |||
== Documentation == | == Documentation == | ||