multi-account-containers icon indicating copy to clipboard operation
multi-account-containers copied to clipboard

No way to disable proxy in container if enabled globally

Open Domini opened this issue 8 months ago • 1 comments

Before submitting a bug report

  • [x] I updated to the latest version of Multi-Account Container and tested if I can reproduce the issue
  • [x] I searched for existing reports to see if it hasn't already been reported

Step to reproduce

  1. set a proxy in Firefox settings
  2. launch a container without proxy set in it
  3. open a website that allows you to distinguish whether proxy is used or not (e.g. some website that shows your IP) in this container

Actual behavior

website is opened through the globally set proxy

Expected behavior

there should be a way to make website open directly, without using the globally set proxy

Additional informations

Formally, this is a feature request, however, I would say the current behaviour/UI is very ambiguous and this has security implications, that is why I file it as a bug report.

Current UI lets you leave proxy empty or set it to a specific URL (Manage Containers - container - Advanced proxy settings). Leaving proxy empty easily implies that the traffic in this container would flow directly, without using a proxy, but in fact it would fallback to Firefox global settings - so flow through the proxy if one is set globally.

It is currently impossible to make it flow directly AFAIK. I suggest the easiest implementation without changing the UI is to accept some special value for the Advanced proxy settings, e.g. DIRECT (like in proxy.pac specification), that would make it flow directly. Full fledged implementation would imply an additional checkbox in Advanced proxy settings UI with a descriptive name.

Making default behaviour to flow directly even if Firefox global settings have proxy set is not the way to go, as this is still ambiguous and would probably have even worse security implications for the average user.

Provide a copy of Troubleshooting Information page (optional)


Domini avatar Apr 21 '25 01:04 Domini

I encountered the same issue.

Perhaps we should provide full network connection settings for containers, i.e. Ignore the global settings and allow selection between No proxy / Auto-detect ... / Use system proxy settings / Manual proxy configuration, as well as include options like No proxy for and DNS proxy.

HUMORCE avatar Aug 01 '25 11:08 HUMORCE