Ubuntu
webbrowser-app package

  1. Bug #1347892
  2. Comment #11

Comment 11 for bug 1347892

Revision history for this message
Olivier Tilloy (osomon) wrote : Re: Consider defaulting WebPreferences.allowFileAccessFromFileUrls to true

> So, I've had a think about this. I don't think setting
> WebPreferences.allowFileAccessFromFileUrls is a safe default in Oxide
> (or even for the webbrowser), but could be used for the webapp
> container as long as we're not using it to open random files from
> anywhere on the filesystem.

Apps calling the webapp container are confined by apparmor, so I expect they won’t be allowed to open random files on the filesystem.
The browser app currently runs unconfined, so setting preferences.allowFileAccessFromFileUrls to true sounds dangerous indeed.