Re: [seceng] Changed the loading behavior of resource:// URI since Nightly 57

2017-08-30 Thread Ethan Tseng
It means there is no need to use the "No Resource URI Leak" add-on [1] anymore. [1] No Resource URI Leak: Deny resource:// access to Web content: We fill the hole to defend against fingerprinting. Very important to Firefox privacy. A direct workaround for bugzil.la/863246

Changed the loading behavior of resource:// URI since Nightly 57

2017-08-29 Thread Chung-Sheng Fu
Hi everyone, == Background == Firefox and add-ons use the resource:// scheme to load resources internally, but some of the information is available to sites the browser connects to as well. This means a web page can run internal scripts and inspect internal resources of Firefox Browser,