nccgroup / wubes Goto Github PK

For the Firefox sandbox, atm we open Firefox once to initialize the profile folders and another time after we have restored the profile. For a new user, it may not be clear that until we saw this 2nd time Firefox, the sandbox is still not ready to be used.

Instead of calling Firefox.exe without paths, we could have a startup.html that just says Firefox restored successfully so it is clear for the user that it has finished restoring the sandbox.

Thanks a lot for this project. It already works great. In the spirit of a trustworthy hardened operating system it should however contain an option to download and verify a fixed version of Firefox, Python and NPP with a pre-delivered hash.

Right now if you dont provide the content of your desktop profile Firefox will fail and you have to manually delete the %APPDATA%\Mozilla\Firefox\profiles.ini file.

I think copying the profile data into the sandbox might often be a quite bad idea, so it should offer the option to run with an empty profile - for example if the source folder was not populated.