搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

extensions.screenshots.disabled …

more options

win-10 (build 1903.18362.239) firefox-quantum (build 68.0.1)

browser best practices … is it worthwhile to retain "extensions-screenshots-disabled" parameters as "true" value … and, disable it temporarily … during the moment i actually need to take a screen-cap?

my thoughts consider a likelihood the browser could be exploited … and security measures breached by a hacker or some other insect. or … is it just as easy for a hacker to garner a screen-cap even with the parameter disabled?

thanks.

ref: about:config

win-10 (build 1903.18362.239) firefox-quantum (build 68.0.1) browser best practices … is it worthwhile to retain "extensions-screenshots-disabled" parameters as "true" value … and, disable it temporarily … during the moment i actually need to take a screen-cap? my thoughts consider a likelihood the browser could be exploited … and security measures breached by a hacker or some other insect. or … is it just as easy for a hacker to garner a screen-cap even with the parameter disabled? thanks. ref: about:config
已附加屏幕截图

由gnarlyone于修改

所有回复 (1)

more options

Hi gnarlyone, the method for capturing an image of the current page uses JavaScript and the Canvas element, so scripts in the site itself certainly can take a screenshot. What is what is the scenario where a screen capture of the current web page might be viewed by "a hacker or some other insect?"

Since Firefox Screenshot is an extension, it would be difficult for a web page, or another extension, or an external program to use it.

However, you might consider these scenarios that don't involve using Firefox Screenshot:

(1) If you install a malicious or compromised extension, it could use its own screen capturing code. If the extension has you install an external program to communicate with Windows, well, more stuff could go down.

(2) Spyware installed outside your browser can see your screen at all times. This wouldn't necessarily enable capturing a full web page (the part out of view), but that depends on its sophistication.