Open Bug 605658 Opened 14 years ago Updated 2 years ago

Home page settings are revealed in about:support but should be hidden unless needed for support

Categories

(Toolkit :: General, defect, P5)

defect

Tracking

()

People

(Reporter: rsx11m.pub, Unassigned)

References

Details

(Keywords: privacy)

The about:support page contains a button "Copy all to clipboard" to easily report settings and hardware for support. The Thunderbird variant in bug 548041 even offers a "Send via e-mail" button per currently proposed design. While that's helpful, care has to be taken that privacy-sensitive information isn't disclosed, especially if they are not used for support purposes anyway. The browser.startup.homepage* preferences are included in the about:support page and are copied onto the clipboard along with the other parameters, but knowledge about the home page selection is of no use for support purposes. On the contrary, it may contain URLs the reporter would rather like not to disclose. These preferences should be either removed, disguised, or only revealed per explicitly checked box by the user on demand (for an example see https://addons.mozilla.org/img/uploads/previews/full/49/49927.png with the respective TB design), but not sent by default. Observed for Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.11) Gecko/20101012 Firefox/3.6.11 on branch and Mozilla/5.0 (Windows NT 5.1; rv:2.0b8pre) Gecko/20101012 Firefox/4.0b8pre SeaMonkey/2.1b2pre on trunk.
Blocks: 545110
Keywords: privacy
It is a good question whether we should be including this by default and while I by no means know what the answer is I will point out that the home page selection is often of use for support purposes. I can probably find a decent number of bugs where users were confused over why a certain set of tabs were opening on every startup only for it to be revealed that they had set their homepage to all of those tabs at once. Likewise popups appearing, downloads starting on startup etc. can be caused by something in the homepage list.
Ok, point taken about home page settings sometimes contributing to an issue occurring, but I'd still think that the privacy considerations for the default set of prefs reported should outweigh that. The Thunderbird idea of hiding or disguising server settings by default but providing a checkbox to unhide those settings if the user is asked for and agrees seems to be a good compromise.
Summary: Home page settings are revealed in about:support but not needed for support → Home page settings are revealed in about:support but should be hidden unless needed for support
Yeah it could perhaps just be reduced down to whether you have a homepage set and if so how many tabs it is, that might be enough for the supporter to at least spot a potential source of problems and then ask for further details.
Severity: normal → S4
Priority: -- → P5
You need to log in before you can comment on or make changes to this bug.