RequestPolicy/requestpolicy — Issue #140: Requests from about:home blocked in Firefox 4
Author: jsamuel
Created: 2011-12-22 05:07:38+00:00
State: open
Labels: extension

Going to about:home in Fx4 allows the page to load but requests from the page are considered to originate from about:home rather than the URL that about:home actually caused to be loaded. This means that, for example, the default google search page's search box doesn't work.

Trying on Fx 3.6, going to about:home seems to result in the location bar changing to the real location. That has the side effect of allowing !RequestPolicy to work nicely with about:home.

I see this in the !NoScript changelog:

{{{
v 1.9.9.73
==========================================================================
...
+ Added about:addons and about:home to the mandatory whitelist
...
}}}

Whitelisting about:home seems a little sketchy.

Maybe one solution is to try to redirect users from about:home to the actual location.

fwiw, if Fx 4 keeps this behavior then a few kids will run around entertaining themselves by switching people's home page to their own phishing page and the 1% of users who would have normally noticed the odd location in the location bar will no longer be able to notice.