Disable cross domain web security in Firefox

Almost everywhere you look, people refer to the about:config and the security.fileuri.strict_origin_policy. Sometimes also the network.http.refere.XOriginPolicy.

For me, none of these seem to have any effect.

This comment implies there is no built-in way in Firefox to do this (as of 2/8/14).

Related Contents:

  1. In what cases will HTTP_REFERER be empty
  2. When do browsers send the Origin header? When do browsers set the origin to null?
  3. Disable firefox same origin policy
  4. Firefox ‘Cross-Origin Request Blocked’ despite headers [closed]
  5. Is it safe to enable CORS to * for a public and readonly webservice?
  6. Is it safe to enable ”Access-Control-Allow-Origin: *“ (wildcard) for a public and readonly webservice?
  7. How does the SQL injection from the “Bobby Tables” XKCD comic work?
  8. What is the best way to implement “remember me” for a website? [closed]
  9. How to redirect all HTTP requests to HTTPS
  10. Difference between Hashing a Password and Encrypting it
  11. Are HTTP cookies port specific?
  12. Is “double hashing” a password less secure than just hashing it once?
  13. How do I create a self-signed certificate for code signing on Windows?
  14. What is token-based authentication?
  15. What is the best way to prevent session hijacking?
  16. The necessity of hiding the salt for a hash
  17. How to create cross-domain request?
  18. Best way to handle security and avoid XSS with user entered URLs
  19. SSL and man-in-the-middle misunderstanding
  20. What are the integrity and crossorigin attributes?
  21. Will HTML Encoding prevent all kinds of XSS attacks?
  22. Where do you store your salt strings?
  23. How to enable cross-origin resource sharing (CORS) in the express.js framework on node.js
  24. SPA best practices for authentication and session management
  25. Why is using a Non-Random IV with CBC Mode a vulnerability?
  26. What algorithm should I use to hash passwords into my database? [duplicate]
  27. Differences Between Rijndael and AES
  28. Best Practices: Salting & peppering passwords?
  29. How are software license keys generated?
  30. Payment Processors – What do I need to know if I want to accept credit cards on my website? [closed]
  31. What is the most secure seed for random number generation?
  32. How do I store and retrieve credentials from the Windows Vault credential manager?
  33. Why not use MD5 for password hashing?
  34. Are Google Cloud Functions protected from DDoS attacks?
  35. Docker and securing passwords
  36. Send mail via Gmail with PowerShell V2’s Send-MailMessage
  37. CORS and phonegap apps
  38. IIS7, web.config to allow only static file handler in directory /uploads of website
  39. How to pass the value of a variable to the standard input of a command?
  40. Javascript module not working in browser?
  41. How will a server become vulnerable with chmod 777?
  42. What is a retpoline and how does it work?
  43. Is it worth encrypting email addresses in the database?
  44. SSL Error: unable to get local issuer certificate
  45. curl – Is data encrypted when using the –insecure option?
  46. Is it OK to return a HTTP 401 for a non existent resource instead of 404 to prevent information disclosure?
  47. Enable CORS in Golang
  48. Why does a cross-origin HEAD request need a preflight check?
  49. Difference between CSRF and X-CSRF-Token
  50. Understanding CSRF

Leave a Comment