Compara les revisions

local network access, site permissions, Firefox security

Learn why Firefox now asks permission before allowing sites to access your personal device or local network.

To better protect your privacy and security, Firefox includes permissions that control whether websites can access apps and services on your local network and local device. This change stops websites from exploiting them without your knowledge. [[Template:progressiverollout]] =Why is Firefox adding these permissions?= Websites can attempt to access your personal device — such as your computer or local network — and connected devices — such as routers, printers and local web servers — without your permission. Malicious sites have used these capabilities to track you or scan for vulnerable devices. To keep you safe and help you stay in control of your data and devices, Firefox now asks for your permission when a site tries to connect to your device or local network. =What to expect when a site requests access= When a website tries to access your device or local network, Firefox will display a ''permission prompt'' similar to those for accessing your ''camera'' or ''microphone''. You can choose to: *{button Allow} access for that visit *{button Block} access for that visit You can also choose to have Firefox remember your decision for all future visits. You can change it anytime in your ''Settings''. ==What is considered ”device apps and services”?== "Device apps and services" are your personal computer and all the applications installed on it. ==What is considered a "local network device"?== Local network devices are any hardware connected to the same local network as your device. This includes: *Routers *Printers *File servers *Smart TVs *Media streamers *IoT (Internet of Things) devices Accessing these devices over the network could allow websites to interact with or retrieve data from them. A permission check helps prevent sites from doing so without your knowledge. =Manage access permissions to your device and local network= When a site tries to access other apps and services on your device or your local network, Firefox will show a permission prompt near the address bar, asking you to allow access. For {menu Device apps and services}, the prompt looks like this: ;[[Image:devicepermissionschanged]] For {menu Local network devices}, the prompt looks like this: ;[[Image:localnetworkchanges]] {note}'''Tip:''' If you want Firefox to remember your choice for the site for all future visits, you can also check the '''Don’t ask again for this site''' box.{/note} ==Configure access permissions== #[[Template:optionspreferences]] #Go to the ''Privacy & Security'' panel. #Scroll down to the ''Permissions'' section. #Find {menu Device apps and services}, and click {button Settings…}. #Here you’ll see a list of sites that have requested this permission. #Use the dropdown menu next to each site to change access. #Find {menu Local network devices}, click {button Settings…}, and repeat steps 5-6. ;[[Image:permission]] For {menu Device apps and services}, the prompt looks like this: ;[[Image:deviceservices|width=700]] For {menu Local network devices}, the prompt looks like this: ;[[Image:localnetwork|width=700]] {for fx147} =Advanced Configuration (about:config)= For users who need more control over local network access behavior, Firefox provides advanced preferences accessible through about:config. [[Image:advancedconfiguration]] {warning}'''Warning''': Changing these preferences requires careful consideration and may affect how websites interact with your local network.{/warning} ==To access these preferences== #Type {pref about:config} in the Firefox address bar and press {button Enter} #Click '''"Accept the Risk and Continue"''' if prompted #Search for the preference name you want to modify #Double-click to change boolean values {pref (true/false)} or click the edit icon for other values ==Available preferences== ===network.lna.enabled (boolean)=== *Default: {pref true} *Controls whether local network access checks are enforced *Setting to {pref false} disables all local network access restrictions ===network.lna.blocking (boolean)=== *Default: {pref true} *Controls the blocking behavior for local network access *Setting to {pref false} allows access without prompts when enabled ===network.lna.block_trackers (boolean)=== *Default: {pref false} *Experimental feature that blocks third-party trackers from accessing localhost and local network resources *Setting to {pref true} provides additional protection against tracking scripts ===network.lna.skip-domains (string)=== Default: {pref (empty)} Comma-separated list of domains that should skip local network access checks Can include both source domains (websites making requests) and target domains (local resources being accessed) Supports wildcard patterns with {pref *}. prefix (for example {pref *.company.com}) Example: {pref intranet.company.com,*.devices.local} ==Troubleshooting and monitoring== If you need to see detailed information about local network access attempts or diagnose issues: #Press {button F12} or {button Ctrl+Shift+I} (Windows/Linux) / {button Cmd+Option+I} (Mac) to open the Web Console #Look for messages related to local network access #The console will show which requests were blocked or allowed, helping you understand what's happening For enterprise environments, administrators can use the LocalNetworkAccess policy to manage these settings organization-wide. See the [https://mozilla.github.io/policy-templates/ Firefox Enterprise Policy Documentation] for more information. ==Report issues== If you encounter unexpected prompts or believe a website is being incorrectly blocked or allowed: #Open the Web Console (F12) to capture relevant error messages (usually starting with Local Network Access ...) #File a bug in Bugzilla under the '''Core :: Networking''' component #Include in your bug report: #*The website URL where you saw the unexpected prompt #*What you expected to happen vs. what actually happened #*Error messages from the Web Console #*Whether the site is trying to access a local device or local network resource #File a bug [https://bugzilla.mozilla.org/enter_bug.cgi?product=Core&component=Networking here] {/for} =Related articles= *[[Site Permissions panel]] *[[Manage optional permissions for Firefox extensions]] *[[How to manage your camera and microphone permissions with Firefox]]