FullPageOS icon indicating copy to clipboard operation
FullPageOS copied to clipboard

New windows can be opened in kiosk mode, exposing the Settings menu

Open dudfunk opened this issue 4 years ago • 1 comments

What were you doing?

In kiosk mode, a new window can be opened pressing CTRL+N, +M, CTRL+SHIFT+N +M, even when using Shortkeys Extention. This exposes a full normal window that a user can open Chromium settings and could compromise an otherwise secure kiosk.

/etc/fullpageos_version does not exist in my system.
Shortkeys used to work but I guess it hasn't been updated along with Chromium. I know shortkeys is not part of fullpageos but if we can find a way to disable some shortcuts that would be beneficial to securing the kiosk. We can still allow shortcuts like ALT+arrow keys for navigation, F5 for refresh, CTRL+W to close the windows/tabs which is useful when one wants to reset the browser. In some cases CTRL+P for printing can be allowed with the --kiosk-printing switch.

dudfunk avatar Aug 12 '21 19:08 dudfunk

Related regrading hardening: #264

guysoft avatar Jan 15 '24 12:01 guysoft