Firefox 3.6/AboutSupport Security Review: Difference between revisions

Line 39: Line 39:
* What is the output of this feature?
* What is the output of this feature?
* What storage formats are used?
* What storage formats are used?
=== The about:support output format ===
;Application Basics
* Name, e.g. "Firefox"
* Version, e.g. "3.7a1pre"
* Profile Directory, (just a button to open the profile directory)
* Installed Plugins (just a link to about:plugins)
* Build Configuration (just a link to about:buildconfig)
;Extensions
* Name, e.g. "Firebug"
* Version, e.g. "1.4.3b1"
* Enabled ("true" or "false")
* ID, e.g. "firebug@software.joehewitt.com"
;Modified Preferences
Only preferences that are modified (i.e. have a "user value") and are also on the whitelist are shown.
The current whitelist is:
  // We use a preferences whitelist to make sure we only show preferences that
  // are useful for support and won't compromise the user's privacy.  Note that
  // entries are *prefixes*: for example, "accessibility." applies to all prefs
  // under the "accessibility.*" branch.
  const Whitelist = [
    "accessibility.",
    "browser.fixup.",
    "browser.history.",
    "browser.link.open_newwindow",
    "browser.link.open_newwindow.restriction",
    "browser.mousewheel.",
    "browser.places.",
    "browser.startup.homepage",
    "browser.startup.homepage_override.mstone",
    "browser.tabs.",
    "browser.zoom.",
    "dom.",
    "extensions.checkCompatibility",
    "extensions.lastAppVersion",
    "font.",
    "general.useragent.",
    "gfx.color_management.mode",
    "javascript.",
    "keyword.",
    "layout.css.dpi",
    "network.",
    "places.",
    "print.",
    "privacy.",
    "security."
  ];


== Reliability ==
== Reliability ==
213

edits