Open
Bug 605658
Opened 14 years ago
Updated 2 years ago
Home page settings are revealed in about:support but should be hidden unless needed for support
Categories
(Toolkit :: General, defect, P5)
Toolkit
General
Tracking
()
NEW
People
(Reporter: rsx11m.pub, Unassigned)
References
Details
(Keywords: privacy)
The about:support page contains a button "Copy all to clipboard" to easily report settings and hardware for support. The Thunderbird variant in bug 548041 even offers a "Send via e-mail" button per currently proposed design. While that's helpful, care has to be taken that privacy-sensitive information isn't disclosed, especially if they are not used for support purposes anyway.
The browser.startup.homepage* preferences are included in the about:support page and are copied onto the clipboard along with the other parameters, but knowledge about the home page selection is of no use for support purposes. On the contrary, it may contain URLs the reporter would rather like not to disclose. These preferences should be either removed, disguised, or only revealed per explicitly checked box by the user on demand (for an example see https://addons.mozilla.org/img/uploads/previews/full/49/49927.png with the respective TB design), but not sent by default.
Observed for Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.11) Gecko/20101012 Firefox/3.6.11 on branch and Mozilla/5.0 (Windows NT 5.1; rv:2.0b8pre) Gecko/20101012 Firefox/4.0b8pre SeaMonkey/2.1b2pre on trunk.
Comment 1•14 years ago
|
||
It is a good question whether we should be including this by default and while I by no means know what the answer is I will point out that the home page selection is often of use for support purposes. I can probably find a decent number of bugs where users were confused over why a certain set of tabs were opening on every startup only for it to be revealed that they had set their homepage to all of those tabs at once. Likewise popups appearing, downloads starting on startup etc. can be caused by something in the homepage list.
Ok, point taken about home page settings sometimes contributing to an issue occurring, but I'd still think that the privacy considerations for the default set of prefs reported should outweigh that. The Thunderbird idea of hiding or disguising server settings by default but providing a checkbox to unhide those settings if the user is asked for and agrees seems to be a good compromise.
Summary: Home page settings are revealed in about:support but not needed for support → Home page settings are revealed in about:support but should be hidden unless needed for support
Comment 3•14 years ago
|
||
Yeah it could perhaps just be reduced down to whether you have a homepage set and if so how many tabs it is, that might be enough for the supporter to at least spot a potential source of problems and then ask for further details.
Updated•3 years ago
|
Severity: normal → S4
Updated•2 years ago
|
Priority: -- → P5
You need to log in
before you can comment on or make changes to this bug.
Description
•