Safe Launcher Security

Development
22

I tried to wire up a sample that seems to work for now. I thought of sharing the same with you guys to know whether it helps.

Plan to tighten the screws for the issues highlighted,

  1. Stringent validation for CORS based on Origin header. Allow XHR requests only if the origin ends with .safenet.
  2. Update proxy to handle only .safenet http requests, other requests will be forbidden. This doesn’t make a significant difference because the PAC file redirects only for .safenet requests. But just incase if the rule is skipped, then the proxy filters the requests.
  3. The PAC file remains the same
  4. Encourage the usage of uBlockOrigin addon as suggested by @lightyear in this post

The problem here is that we need to configure the proxy and the addon manually (More configuration).

If we can create a simple addon which will configure the proxy and also add the filtering rules as needed it would make it easier for the user.

Thanks @lightyear for sharing the configurations.

Please share your thoughts on this approach.

8 Likes