User.js: Why is devtools.chrome.enabled included?

Created on 12 Sep 2016  路  2Comments  路  Source: pyllyukko/user.js

What makes devtools.chrome.enabled a privacy/security threat?

question
Source
picture mindstormer12

Most helpful comment

It was introduced in 9715f3cc7e85da807f3872bb29d2bbc79615387f to make sure remote debugging is not enabled/available.

But apparently it has some additional features, such as limiting scratchpad privileges.

And also apparently to defend against self-XSS (yes, it's a thing) attacks:

picture pyllyukko on 12 Sep 2016
👍2

All 2 comments

The Chrome DevTools are a set of web authoring and debugging tools built into Google Chrome.

Are you a chrome developer? If so, exclude it.
Aren't you a dev? Leave it included.

Atavic picture Atavic on 12 Sep 2016
👍2

It was introduced in 9715f3cc7e85da807f3872bb29d2bbc79615387f to make sure remote debugging is not enabled/available.

But apparently it has some additional features, such as limiting scratchpad privileges.

And also apparently to defend against self-XSS (yes, it's a thing) attacks:

pyllyukko picture pyllyukko on 12 Sep 2016
👍2
Was this page helpful?
0 / 5 - 0 ratings

Related issues

brakenow picture brakenow  路  7Comments
darnir picture darnir  路  6Comments
gerroon picture gerroon  路  3Comments
jawz101 picture jawz101  路  3Comments
pyllyukko picture pyllyukko  路  6Comments