lazarus_addon icon indicating copy to clipboard operation
lazarus_addon copied to clipboard

Remove calls to old servers and network resources

Open maphew opened this issue 7 years ago • 1 comments

There are a number of places in the code where remote servers are defined and/or called that are not relevant to Lazarus now. These should be removed or at least defined as null or example.com.

This is a security issue as well just cleaning up old stuff. At any time those domains could be sold or taken over by someone not related to the extension and who knows information is being transferred. At the very least it will be browser version, some kind of identifier and ip address.

Examples:

https://github.com/lazarus-recovery/original_ff/blob/e2a2ae0d2cf81a15a23601fcbfc0ae9608f27b8e/src/js/lazarus.js#L14-L30

https://github.com/lazarus-recovery/original_ff/blob/e2a2ae0d2cf81a15a23601fcbfc0ae9608f27b8e/src/options.html#L37-L39

maphew avatar Dec 19 '17 21:12 maphew

I took a first crack at disabling the external server calls, see commit above. I don't know how to test the result though so something could have broken.

maphew avatar Feb 08 '18 07:02 maphew