why isn't "Saved Passwords" and "Saved Search and Form data" separated between containers? There have been autofill/form-data attacks in the past[0] and there was a story recently on HN's front page showing the same[1]. I'd like to point out that mozilla already has a configuration option to disable form data saving on https sites, 'browser.formfill.saveHttpsForms'. Why?[2] > Right; the idea is to eliminate "opportun…
Container Tabs
41–50 of 222 posts
Re: Container Tabs
#42I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise. Say site www.a.org includes an image from www.evilcorp.org, and www.evilcorp.org sets a cookie. When I then go to www.b.org and it includes an image from www.evilcorp.org, I don't expect the cookie to be sent back. In other words, the cookie should be tied to www.a.org, even though it actually c…
Re: Container Tabs
#43I've been doing this for years using both Firefox' and Thunderbird's multiple-profile features. Just run "firefox --no-remote -ProfileManager" and here you go. So the serious question is: how is this any different from using multiple profile? Multiple profile also have the pro/con that they are actual different processes, so there's no information leak between profiles whatsoever (well, unless some serious hacking ha…
Re: Container Tabs
#44Earlier quoted context omitted.
Edit: I guess I'm misremembering how Chrome works, or maybe they changed it since I've last used Chrome seriously. I'll leave the comment so the replies make sense. Original comment: I'm kind of surprised that Mozilla went with a per-tab approach here, since they went with per-window for private browsing (while Chrome did the opposite: per-tab private browsing and per-window profiles).
That's not right. Chrome's incognito mode is per window.
Re: Container Tabs
#45I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise. Say site www.a.org includes an image from www.evilcorp.org, and www.evilcorp.org sets a cookie. When I then go to www.b.org and it includes an image from www.evilcorp.org, I don't expect the cookie to be sent back. In other words, the cookie should be tied to www.a.org, even though it actually c…
how would you do oauth (or openid style login) with this then?
Re: Container Tabs
#46Why do I even need this? Isn't it by default so that site1.com can't see cookies from site2.com for example?
Re: Container Tabs
#47Re: Container Tabs
#48Earlier quoted context omitted.
That's not right. Chrome's incognito mode is per window.
Not even. Chome's session isolation is only per each of the two browsing modes.
Re: Container Tabs
#49Earlier quoted context omitted.
Edit: I guess I'm misremembering how Chrome works, or maybe they changed it since I've last used Chrome seriously. I'll leave the comment so the replies make sense. Original comment: I'm kind of surprised that Mozilla went with a per-tab approach here, since they went with per-window for private browsing (while Chrome did the opposite: per-tab private browsing and per-window profiles).
I might be remembering wrong, but I'm pretty sure Chrome started with per-window private browsing before eventually upgrading to per-tab. So Firefox seems to be just jumping ahead of that initial limitation from the start here.
Re: Container Tabs
#50I've been doing this for years using both Firefox' and Thunderbird's multiple-profile features. Just run "firefox --no-remote -ProfileManager" and here you go. So the serious question is: how is this any different from using multiple profile? Multiple profile also have the pro/con that they are actual different processes, so there's no information leak between profiles whatsoever (well, unless some serious hacking ha…
https://addons.mozilla.org/en/firefox/addon/change-window-ic...
To answer your question, it's probably quicker and takes up less HD space :) And now we can have profiles and container tabs in those profiles, or just use profiles or just use container tabs, how cool is that.