Files
IronFox/docs/Safe-Browsing.md
celenity 440d5482a1 IronFox v146.0
ironfox-oss/IronFox!109
____

## Changes

- [Added missing Gecko icons/branding assets](90e371ec7c).
- Added a toggle in settings that forces the browser to *always* use private mode *(similar to Firefox on Desktop)*. The setting is *disabled* by default, and is located at `Settings` -> `IronFox` -> `IronFox settings` -> `Privacy` -> **`Always use private browsing`**.
- [Disabled Mozilla's new `Unified Trust Panel` by default](2eaa0c7c9a), as it prevents users from being able to control the cookie banner blocker on a per-site basis.
- [Enabled Mozilla's new redesign for private browsing mode](43661d10a7) by default.
- Fixed [an issue with `BankID` authentication](https://gitlab.com/ironfox-oss/IronFox/-/issues/213) on certain websites *(Thanks to [rajtsic](https://gitlab.com/rajtsic)!)*.
- [Removed Mozilla's new `Clear Key` CDM](f9a0a07793).
- Updated cbindgen to [`0.29.2`](https://docs.rs/crate/cbindgen/0.29.2).
- Updated to Firefox [`146.0`](https://firefox.com/firefox/android/146.0/releasenotes/).
- [Various tweaks to improve and refine the build process, as well as other minor changes, tweaks, and fixes](https://gitlab.com/ironfox-oss/IronFox/-/merge_requests/109/diffs).

MR-author: celenity <celenity@celenity.dev>
Co-authored-by: Weblate <hosted@weblate.org>
Co-authored-by: techaddict <20232669-techaddict@users.noreply.gitlab.com>
Co-authored-by: user <user@localhost.localdomain>
Co-authored-by: Akash Yadav <itsaky01@gmail.com>
Approved-by: Akash Yadav <itsaky01@gmail.com>
Merged-by: celenity <celenity@celenity.dev>
2025-12-10 19:08:11 +00:00

2.4 KiB

Safe Browsing

IronFox enables Google Safe Browsing by default to provide users with real-time protection against malware, phishing, and other threats.

Firefox's Safe Browsing implementation is very well-designed from a privacy perspective. It is free and open source, and unlike Chromium browsers on Android, does not rely on Google Play Services.

On top of Firefox's already privacy-respecting design and implementation of Safe Browsing, we take additional measures to further improve privacy for users, by routing connections to Google through our proxy.

When Safe Browsing is enabled, IronFox will periodically update its database (through our proxy) to provide protection against the latest threats. Additionally, if a potential match for a malicious website is found, IronFox might submit a partial hash of the suspected URL to Google (through our proxy).

At the cost of security, you can disable Safe Browsing if desired, by navigating to Settings -> IronFox -> IronFox settings -> Security -> Enable Safe Browsing.

If you'd like to keep Safe Browsing enabled, but prefer to disable our proxy and connect to Google directly, you can do this by setting the following preferences at about:config:

  • browser.safebrowsing.provider.google4.gethashURL -> https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSING_API_KEY%&$httpMethod=POST
  • browser.safebrowsing.provider.google4.updateURL -> https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSING_API_KEY%&$httpMethod=POST
  • browser.safebrowsing.provider.google5.gethashURL -> https://safebrowsing.googleapis.com/v5/hashes:search?key=%GOOGLE_SAFEBROWSING_API_KEY%
  • browser.safebrowsing.provider.google5.updateURL -> https://safebrowsing.googleapis.com/v5/hashLists:batchGet?key=%GOOGLE_SAFEBROWSING_API_KEY%

If you'd like to revert back to using our proxy, you can do so at any time by resetting the values of the browser.safebrowsing.provider.google4.gethashURL, browser.safebrowsing.provider.google4.updateURL, browser.safebrowsing.provider.google5.gethashURL, and browser.safebrowsing.provider.google5.updateURL preferences.