webconverger / webconverger-addon Goto Github PK

Some poor Webpages out of our client's control do not set the right HTTP headers, leading to possibility of sensitive form data to be exposed in a kiosk setting.

RE
https://groups.google.com/forum/#!msg/webc-users/TxsyvRqqJpY/iESEqvOzHAAJ

We need to explore overriding a bad page by manipulating HTTP headers by adding:

• no-cache
• no-store
• must-revalidate

I saw explore, because this blanket feature enabled on Website might cause havoc.

Hey Mike, do you have any time to work on disabling the latest features Mozilla have flung our way? ;)

On chrome=webconverger it's to the right of the home button, and chrome=webcnoaddressbar it's to the left.

I don't think it's necessary for the fixed type of deployments Webconverger has.

I think we should if off by default with a prefs= ability to re-enable it.

https://www.youtube.com/watch?v=tVPiIruJ7rA

E.g. when Webconverger/webc@0c3cfe5 is missing.

For internal needs, we've built a feature to fileBlockService.js that allows downloads of certain, whitelisted filetypes. Would this be interesting for the upstream project? If so, I could make a PR out of our patch.

https://bugzilla.mozilla.org/show_bug.cgi?id=1044268#c10

I don't think this is a typical requirement for Webconverger installs. Again, be nice to have this off by default, with an option to enable it via prefs= API.

As long as Youtube works flawlessly, I'd rather have it off.

From customer: """The reason we would prefer not to have it is because we are using this in a kiosk museum environment with touchscreens. It looks like a standalone display. The status only shows
what page the user is currently on and is a little distracting."""

Erroneously reported on https://bugzilla.mozilla.org/show_bug.cgi?id=1168740

After a long debug session, I've narrowed down the bug to https://github.com/Webconverger/webconverger-addon/blob/master/components/fileBlockService.js

https://github.com/Webconverger/Debian-Live-config/blob/master/webconverger/config/includes.chroot/usr/bin/kioskresetstation has a short coming in the sense it can't tell if a homepage has been manipulated.

So it would be great if the extension can kill the browser after X minutes of inactivity set in a preference.

This should open in a new tab, not a new window.

Users can get confused that they've closed the last window (tab), when in fact, they haven't.

We much be careful to block any other modifiers?

This odd sidebar and more feature, I've found to be enabled on Firefox 39:
https://activations.cdn.mozilla.net/
e.g. https://support.mozilla.org/en-US/kb/share-firefox-hello-social

http://s.natalian.org/2015-07-13/disable-me.png
http://s.natalian.org/2015-07-13/services.png

Investigating how to disable this...

FF28 http://s.natalian.org/2014-04-01/1396330683_1159x748.png
FF29 http://s.natalian.org/2014-04-01/1396330777_1159x748.png
FF29 chrome=webconverger http://s.natalian.org/2014-04-01/1396331931_1159x748.png does have back/foward icons

I can assume that back/forward buttons from FF29 are in the #urlbar-container which is disabled in https://github.com/Webconverger/webconverger-addon/blob/master/src/webcnoaddressbar.css#L96

So we need a way of getting them back, ideally looking as the do in FF28: http://s.natalian.org/2014-04-01/1396330683_1159x748.png

Hi Mike,

Do you think you could please re-merge in Proxy support into HTTPObserver? I'm not sure why it didn't make it to master, but was present in https://github.com/Webconverger/webc/blob/master/etc/webc/extensions/webconverger/modules/webconvergerModule.jsm

0fcdf61

Maybe I should not have made this change, since it conflates the other FF29 work, hence the separate bug.

However from 6c1f4c1, resetting to FF29 defaults seems to be different from the documentation at http://kb.mozillazine.org/Browser.tabs.closeButtons

We must have a visual reference for users to know how to kill the last tab / their browsing session. Sidenote: There are binds like F10 & shift+alt+c to close the session too.

I discovered this whilst testing Firefox 31.

This amazingly seems to be the case in Webconverger 25 too. :/

Ctrl+p works. But not selecting the icon.

homepage=http://hendry.iki.fi/
showprintbutton
debug

http://s.natalian.org/2014-06-25/netError.png

https://github.com/Webconverger/webconverger-addon/blob/master/content/netError.xhtml

Guess it needs updating

So it doesn't dissapear like it can on recent FF builds.

Striving for a stable boring browser UI here... :)

Thanks,

I know it sounds ridiculous to do this, but it's quite hard to wireshark encrypted channels. This would be some sort of feature I would like to help debug things.

Every tab should have a close button ("x") like in Firefox. Current close button is in an unusual location (for the user), and right next to a "+", making it visually confusing.

Alternatively you could bring back the API option to choose where the button should be.

http://www.flickr.com/photos/hendry/7240657714

Can't remember which one this is triggered by.

https://github.com/Webconverger/iceweasel-webconverger/blob/master/defaults/preferences/prefs.js has most of these set to false. Must be another key... ?

Although this is not a problem since the way Webconverger works, these setting would be be reset, nonetheless it's better to have several layers of security.

<www.linuxuser.co.uk/reviews/webconverger-11-review/>

I can't easily roll back to Firefox 37 on my Archlinux system, so I am not 100% sure.

Though http://build.webconverger.org/webc-0fa21c1.iso aka Webconverger/webc@0fa21c1 I can confirm is missing the icon.

On first load, FF does not print the URL.

http://support.mozilla.org/en-US/questions/937137
http://support.mozilla.org/en-US/questions/843074

Any ideas how to fix this? Answers seem to indicate an addon problem...

Which sounds about right, since I can't reproduce this behaviour without the Webconverger addon installed.

Tiles is this: https://blog.mozilla.org/advancingcontent/2014/11/13/announcing-firefox-tiles-going-live-today/

Seems to create quite a lot of noise on the wire too, for a feature we already hide. I.e. when a use opens a new tab, it's blank.

This was working in webc-24.iso and I find it very useful.

This should have been left enabled: https://github.com/Webconverger/webconverger-addon/blob/master/src/webconverger.xul#L23

Any ideas?

I noticed a Pinned tab can hide the X and make it difficult to clear the session if you don't know how to unpin a tab.

These create a lot of noise. We control Addons, so I don't see the value in Mozilla blocking them.
Safebrowsing should be enabled, probably. But I would like to be able to switch it off if I was feeling paranoid! :) Hopefully via the prefs= API?

It seems to alert even when it's permitted. I think this has become more of an issue since Firefox 38.

The new about:home screen gives lots of access to users.

We should just remove it.

It gets stuck.

http://s.natalian.org/2013-02-13/webc-addon-44-validation.htm

Some background: https://www.youtube.com/watch?v=88MNHBe_JG0

Just been studying https://github.com/racketlogger/ModernKiosk but that doesn't do chrome=webconverger, aka provide a limited {urlbar,back,forward} UI: https://webconverger.org/kiosk/

This worked before then BrowserLoadURL changed in Firefox and upstream didn't do anything about it. However I think Mike has shown me some code that effectively solves this problem! :)

http://r2d2.webconverger.org/2012-11-22/firefox-fullscreen.html

Hello,

I've noticed that when I build the xpi from sources (I'm talking about webconverger.xpi), and install it in a vanilla firefox 45 Beta (on Linux, downloaded as tarball from mozilla), the pocket button is visible, but without function (the popup is just empty).

I think the button should not be visible in the first place (by adding #pocket-button, to webconverger.css). Is this a bug?

The idea with Webconverger's own https://github.com/Webconverger/webconverger-addon/blob/master/src/webconverger-netError.xhtml is that if a page fails to load, it doesn't just sit on the error page.

Perhaps this can be improved:

firefox -jsconsole -chrome chrome://webconverger/content/netError.xhtml

Noticed this while wiresharking http://s.natalian.org/2014-12-21/aboutblank.pcapng.gz
http://s.natalian.org/2014-12-21/ddgfavicon.png

This should work as it did in 24.0.

Just for reference:

This causes problems for a customer.