Mozilla 도움말 검색

고객 지원 사기를 피하세요. 저희는 여러분께 절대로 전화를 걸거나 문자를 보내거나 개인 정보를 공유하도록 요청하지 않습니다. "악용 사례 신고"옵션을 사용하여 의심스러운 활동을 신고해 주세요.

Learn More

Selectively allow websockets

  • 3 답장
  • 1 이 문제를 만남
  • 13 보기
  • 최종 답변자: cor-el

more options

Firefox supports Websockets, which allows servers to push arbitrary data to the client, instead of having to rely on polling methods via HTTP and JS. Whilst solving one problem, it creates another. I do not like the idea that any website can just ask Firefox to make a persistent WS connection without my consent. The same is true for service workers, but (unlike websockets) i'm not at all interested in using those. Luckily there's a configuration option to disable support for websockets, network.websocket.enabled, wich is exactly what i've done.

Is there a way to selectively allow websockets, based on IP or domain? If not, why isn't there one? Am i really the lone outsider who's concerned about security?

Firefox supports Websockets, which allows servers to push arbitrary data to the client, instead of having to rely on polling methods via HTTP and JS. Whilst solving one problem, it creates another. I do not like the idea that any website can just ask Firefox to make a persistent WS connection without my consent. The same is true for service workers, but (unlike websockets) i'm not at all interested in using those. Luckily there's a configuration option to disable support for websockets, ''network.websocket.enabled'', wich is exactly what i've done. Is there a way to '''selectively''' allow websockets, based on IP or domain? If not, why isn't there one? Am i really the lone outsider who's concerned about security?

모든 댓글 (3)

more options

There are permission settings for notifications in "Settings -> Privacy & Security -> Permissions". See also the permissions in "Tools -> Page Info -> Permissions".

more options

Thanks cor-el, that's certainly the place where one would expect such a setting to reside, but the ones that i'm looking for aren't there. There's nothing specific for websockets (nor service workers). The closest option is allowing or disallowing in-browser notifications, which were already set to disallow.

Seeing that websockets were first supported in Firefox 11 (89 releases ago), it boggles my mind why this question hasn't been asked before and is only now starting to be noticable on websites.

more options

Service Workers do not work with websites if you let the cookies expire when you close Firefox (Delete cookies and site data when Firefox is closed) unless you have created a cookie allow exception for this origin. You should see a message about this in the Web Console.