Dangerous bug in Chrome’s ‘New Tab’ page bypassed security features

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by ldng on Thursday November 18, 2021 @03:35AM (#29263372)

Recently they also changed the urlbar to do a search when you type anything... even localhost. INFURIATING. To stay polite. Messed with about:config but did not find a way to disable that crap.

So Chrome and FF are in the same boat: "UX" "designer" taking non-sensical decisions for the whimsical greater good.

[ Parent | on HN ]

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by pitay on Thursday November 18, 2021 @12:17PM (#29267876)

I do not have this issue, but I have a very customized about settings.

Here is the relevant about:config settings I have these changed for the URL bar:

  browser.urlbar.suggest.searches false
  browser.urlbar.searchSuggestionsChoice false 
  browser.urlbar.showSearchSuggestionsFirst false

Also for your urlbar you want to change it so it always shows the scheme and every part of the URL.

  browser.urlbar.trimURLs false

Stop Firefox trying to help with incomplete urls and loading the wrong site:

  browser.fixup.alternate.enabled false

Setting the above about:config entries should stop URLS you type being sent to a search engine and also stop some other surprises in the URL bar.

[ Parent | on HN ]

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by Semaphor on Thursday November 18, 2021 @03:50AM (#29263467)

I do not have this change.

[ Parent | on HN ]

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by berkes on Thursday November 18, 2021 @04:45AM (#29263770)

Me neither. And this is the first time I've heard about it; such changes often raise a lot more havoc on the social media outlets.

I presume grandparent has either hit a bug, has some unusual/untested about:config combination, or, most likely, an addon that broken.

[ Parent | on HN ]