my pin app is not asking for authentication
I added gmail as a pin app tab, but the problem is that I didn't ask to firefox save my password or even to keep me signed in.
If I keep this app tab and quit firefox, next time I open it my app tab still there, but a serious security issue is shown. my gmail signs in automatically. considering that I told him to not save my password and to not keep me signed in, in my opinion it's a high security issue.
it should show me gmail's start page asking for password.
All Replies (2)
You need to log out before closing if you want to preserve that tab or otherwise Firefox will store the Gmail cookies as part of the session data.
You can try to set the pref browser.sessionstore.privacy_level to 2 (never store extra session data) to see if that helps (haven't tested this).
- http://kb.mozillazine.org/browser.sessionstore.privacy_level
- resource:///defaults/pref/firefox.js
To open the about:config page, type about:config in the location (address) bar and press the "Enter" key, just like you type the url of a website to open a website.
If you see a warning then you can confirm that you want to access that page.
Selecting log out before closing the browser works.
But my point is that the behavior from regular tabs and pin app are not consistent. With no additional configuration, if I close the browser without logging me out next time I open the browser it will ask my password. The same thing doesn't happen with pin tab.