If I'm not prompted to save a password, how can I create an exception URL? Library card numbers are confidential by law and are being displayed on our machines
The autofill/password function is allowing library card account nuumbers to display for every previous user on our library computers and probably other computers on campus. Since the box asking "do you want to save" does not appear, we aren't able to check the "Never" box and add the library catalog URL to the Exception list in the Security tool which was the solution recommended in 2011.
Although we recommend our users change their PIN from the default, the majority of them do not so their library records are publicly available, which is a violation of the Patron Confidentiality Act in our states and probably the other 49 states.
We would like to retain Mozilla as a browser option on our library computers, but if there is no way to fix this, we will have our ITS department block it on the College network.
כל התגובות (1)
You can lock the browser.formfill.enable pref and possibly the signon.rememberSignons pref as well to false to disable remembering form data and log in names and passwords.
//
lockPref("browser.formfill.enable", false);
lockPref("signon.rememberSignons", false);
You can use a mozilla.cfg file in the Firefox program folder to lock prefs or specify new (default) values.
Place a file local-settings.js in the defaults\pref folder where you also find the file channel-prefs.js to specify using mozilla.cfg.
pref("general.config.filename", "mozilla.cfg");
See:
These functions can be used in the mozilla.cfg file:
defaultPref(); // set new default value pref(); // set pref, but allow changes in current session lockPref(); // lock pref, disallow changes