submitted 5 months ago* (last edited 5 months ago) by bitahcold@lemmy.world to c/firefoxcss@lemmy.world

5 comments fedilink hide all child comments

Hello friends, I am using custom css' on my Librewolf. Downloaded FF-ULTIMA and it looks cool. I have looked at its all .css files as stranger for css. As far as my view, there is no problem but can these css files cause any security or privacy vulnerability? Like, being injectable or the creator of theme can track us or not? It may seem a funny question but idk much about css language. Just wanted to asking. Am I safe with it?

you are viewing a single comment's thread
view the rest of the comments

[-] unmagical@lemmy.ml 5 points 5 months ago

It's probably safe, but if the CSS loads images via URLs, it's possible that the owner of those URLs is able to track generic metrics about usage or even replace the images arbitrarily to drastically change the theme.

[-] MrOtherGuy@lemmy.world 5 points 5 months ago

Yeah, loading any external resources - I would think fonts even more so than images - is potentially risky. In addition, there is somewhat realistic possibility for browser fingerprinting if you use some style that makes browser viewport size atypical.

I can't think of any actual security issues other than those. Otherwise the worst that a style could do is crash the browser, to make it utterly unusable or make it super slow. But those are all recoverable by simply trashing userChrome.css and restarting Firefox.

[-] tb_@lemmy.world 2 points 2 months ago

there is somewhat realistic possibility for browser fingerprinting

A fun website to visit: https://www.amiunique.org/fingerprint

[-] unmagical@lemmy.ml 2 points 5 months ago

Any external resource is definitely correct. I didn't think about fonts, but some types allow embedded code to assist with rendering and I suppose that could be a vector. I was more thinking about tracking pixels, but I'm really not sure how big any of those risks are in a theme.

I personally wouldn't be worried about them, but I also don't run themes. Browser extensions on the other hand ...

this post was submitted on 28 May 2024

6 points (87.5% liked)

Firefox CSS

418 readers

1 users here now

Pushing the limits of the Firefox Browser through the use of CSS.

#join #firefoxcss:mozilla.org

Post your Firefox UI customizations here!

What is userChrome.css?

Rules (enforced)

Posts must have flair!
Follow Lemmy.World rules
Posts cannot be memes/shitposts. They should be about Firefox customization with CSS.
Please be civil. Bear in mind that many users come here for help and would be turned off by insults and rudeness.
When posting large amount of code use a service dedicated to hosting text snippets, such as pastebin, hastebin, github gist or equivalent. Relatively short snippets can be wrapped in code-block for inline viewing.
Do NOT use url-shorteners or link to compressed downloads (such as zip or rar) when sharing code.

Guidelines (not enforced)

Consider adding the following info to help people try your tweaks:

Screenshots should have code in comments.
Include Firefox version
When asking for help you should share your custom style to help others understand what you are doing. This is increasingly important the more custom rules you have.
List any other addons that may be changing the UI
If a custom wallpaper is used, include a link to the original.
If someone's comment solves you problem, reply to the comment to let them know, and change your post flair to solved.

Wiki

Find Helpful Knowledge and answers to common issues in /c/FirefoxCSS wiki.

Getting started guide

Firefox CSS

Rules (enforced)

Guidelines (not enforced)

Wiki

Links

Lemmy Communities

Websites