Mike-Ward.Net

Keep Firefox’s location bar on sight

Some pop-up windows may hide the location bar for a number of valid good reasons like providing a less cluttered interface or a smaller window, but it is also an easy cover for malicious web sites to hide the real location of fake sites in cross site scripting (XSS) attacks.

Michal Zalewski, the hacker who uncovered a handful of security vulnerabilities in Firefox on last February, pointed it as one of Firefox’s weaknesses. Fortunately, as suggested in the bug discussion, this behavior can be changed to forbid the ability to hide the location bar to all web sites.

To do this:

  • Enter about:config in the location bar
  • Look for dom.disable_window_open_feature.location
  • Double click it to toggle it to true

You are done. Now popups will show the location bar always. It may look weird at first but it’s a small price to pay for additional protection. Mozilla Links

← newer older →
.Net, Technology, Life, Whatever

Recent Posts

VSColorOutput for VS 2017 Released
Quick ReSharper tip for inline templates
NoSQL vs. NewSQL: What's the Difference?
Exploring Mithril, A JavaScript Framework for Building Brilliant Applications
Tweetz 1.1
Tweetz Desktop 1.0
Tweetz 0.11 Released
More... (1073)

Donate with PayPal