extensions.screenshots.disabled …
win-10 (build 1903.18362.239) firefox-quantum (build 68.0.1)
browser best practices … is it worthwhile to retain "extensions-screenshots-disabled" parameters as "true" value … and, disable it temporarily … during the moment i actually need to take a screen-cap?
my thoughts consider a likelihood the browser could be exploited … and security measures breached by a hacker or some other insect. or … is it just as easy for a hacker to garner a screen-cap even with the parameter disabled?
thanks.
ref: about:config
Wót gnarlyone
Wšykne wótegrona (1)
Hi gnarlyone, the method for capturing an image of the current page uses JavaScript and the Canvas element, so scripts in the site itself certainly can take a screenshot. What is what is the scenario where a screen capture of the current web page might be viewed by "a hacker or some other insect?"
Since Firefox Screenshot is an extension, it would be difficult for a web page, or another extension, or an external program to use it.
However, you might consider these scenarios that don't involve using Firefox Screenshot:
(1) If you install a malicious or compromised extension, it could use its own screen capturing code. If the extension has you install an external program to communicate with Windows, well, more stuff could go down.
(2) Spyware installed outside your browser can see your screen at all times. This wouldn't necessarily enable capturing a full web page (the part out of view), but that depends on its sophistication.