lazarus_addon
lazarus_addon copied to clipboard
Remove calls to old servers and network resources
There are a number of places in the code where remote servers are defined and/or called that are not relevant to Lazarus now. These should be removed or at least defined as null or example.com
.
This is a security issue as well just cleaning up old stuff. At any time those domains could be sold or taken over by someone not related to the extension and who knows information is being transferred. At the very least it will be browser version, some kind of identifier and ip address.
Examples:
https://github.com/lazarus-recovery/original_ff/blob/e2a2ae0d2cf81a15a23601fcbfc0ae9608f27b8e/src/js/lazarus.js#L14-L30
https://github.com/lazarus-recovery/original_ff/blob/e2a2ae0d2cf81a15a23601fcbfc0ae9608f27b8e/src/options.html#L37-L39
I took a first crack at disabling the external server calls, see commit above. I don't know how to test the result though so something could have broken.