搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

extensions.screenshots.disabled …

more options

win-10 (build 1903.18362.239) firefox-quantum (build 68.0.1)

browser best practices … is it worthwhile to retain "extensions-screenshots-disabled" parameters as "true" value … and, disable it temporarily … during the moment i actually need to take a screen-cap?

my thoughts consider a likelihood the browser could be exploited … and security measures breached by a hacker or some other insect. or … is it just as easy for a hacker to garner a screen-cap even with the parameter disabled?

thanks.

ref: about:config

win-10 (build 1903.18362.239) firefox-quantum (build 68.0.1) browser best practices … is it worthwhile to retain "extensions-screenshots-disabled" parameters as "true" value … and, disable it temporarily … during the moment i actually need to take a screen-cap? my thoughts consider a likelihood the browser could be exploited … and security measures breached by a hacker or some other insect. or … is it just as easy for a hacker to garner a screen-cap even with the parameter disabled? thanks. ref: about:config
附加的畫面擷圖

由 gnarlyone 於 修改

所有回覆 (1)

more options

Hi gnarlyone, the method for capturing an image of the current page uses JavaScript and the Canvas element, so scripts in the site itself certainly can take a screenshot. What is what is the scenario where a screen capture of the current web page might be viewed by "a hacker or some other insect?"

Since Firefox Screenshot is an extension, it would be difficult for a web page, or another extension, or an external program to use it.

However, you might consider these scenarios that don't involve using Firefox Screenshot:

(1) If you install a malicious or compromised extension, it could use its own screen capturing code. If the extension has you install an external program to communicate with Windows, well, more stuff could go down.

(2) Spyware installed outside your browser can see your screen at all times. This wouldn't necessarily enable capturing a full web page (the part out of view), but that depends on its sophistication.