Do Google chrome and Firefox developer edition browsers share session? - google-chrome

I have been logged-in into stackoverflow in Chrome browser with my Google credentials and then I open stackoverflow in Firefox Developer Edition browser and tried to login again in Firefox with Google credentials. I have been automatically logged-in. I clicked to log out and after logout when try to login with Google credentials, I have been automatically logged-in again.
As per my knowledge, Firefox and Google chrome doesn't share the session.
So, I am curious to know whether this new FDE browser share session
with chrome or is it the feature of StackExchange?

No. Firefox/Chrome doesn't share sessions. Auto relogin is feature of Stackexchange. You can completely uninstall one of the browsers, clear cache and retry and this will still work.
Firefox/Chrome uses entirely different browser engines. Firefox based on Gecko and Chrome is based on Blink - each with it's own data storage formats. They may use sqlite, but Chrome still saves secure passwords with operating system security features like keystore in osx. Firefox saves password internally. Even if they wanted to, for data exchange both browser would need to arrive at a common data exchange formats with a LOT of security implications.

Related

Loadrunner during recording with truclient protocol chrome/firefox instances were opening in incognito mode

In Loadrunner Truclient protocol while recording the web application Google Chrome/Firefox instances is opening in incognito mode but the issue is my application will not work incognito mode.
My application is working fine in only normal mode of Google Chrome/Firefox instances.
Could anyone please let me know during recording with truclient how to change the Chrome/Firefox instances from incognito mode to normal mode.
You already posted this question on the official product forum (https://community.softwaregrp.com/t5/LoadRunner-Practitioners-Forum/Urgent-Truclient-chrome-instance-is-opening-in-Incognito-mode/m-p/1624503) and got a response by the lead developer of the TruClient protocol.
His answer is:
TruClient runs the browser in Incognito/Privacy mode to allow separation of
Vusers during a load test.
This cannot be disabled or changed.
Perhaps you can elaborate on why your application is not working in these
modes, so we can try to find a workaround.
and then
Some browser features behave differently in privacy mode.
For example, IndexedDB cache mechanism is not implemented in Firefox
private mode [See the bug in Mozilla]
https://bugzilla.mozilla.org/show_bug.cgi?id=781982
From the error you mentioned, it seems this is related a similar browser issue.
As mentioned before, it is not possible to run TruClient in non-private mode.
Workaround: Run one full GUI Virtual User in a singular operating system instance. run one of these per business process on dedicated OS instances. Run the remainder of your load using API level (HTTP) virtual users.

Forget which client certificate is used by Chrome for an URL

I'm using a client certificate to authenticate with HTTPS to a website.
The first time, chrome asked me which certificate I wanted to use.
However, I don't how to flush/forget this choice to choose another certificate. Chrome remembers it and I didn't find (either in stackoverflow or chrome settings) a solution to that.
The only way I found is to open a new window in private mode.
Anyone know how to do it ?
Restarting the browser will help and ask you again.
Looking forward to see better solutions.
Open the target URL in an incognito session, and it should re-prompt. Not a great solution, but to me it beats having to restart all of Chrome, especially if you already had a lot of important tabs open.
This particular thing has sucked since the beginning of web browsers. The only solution is to use the platform APIs to build extension to manage client certificates. This is in fact what Google recommends but it's mainly for CAs and other solution providers. So the only way is to reload the browser or use incognito windows.

Chrome disable dev tools?

Is there a command line option where I could launch chrome with the developer tools disabled? The scenario is this - I want to have an extension that will autofill info into forms, but if the form has a password field that the user shouldn't have, by opening up the dev tools and playing in the console it would be easy to discover, which is something I've been asked to prevent - is this possible?
Not possible. There is no such flag in Chrome.
From a security point, passwords should never be filled in by anybody other then the user himself.
The client should never-ever receive sensitive data that the user is not proven to be authorized to have.
And no, you cannot affect client-side applications. Chrome is not the only browser that has inspection tools.

Walk around Firefox's offline storage warning?

I am developing an web app with HTML5 offline browsing support. I wrote a manifest file as shown below:
CACHE MANIFEST
CACHE:
audio/a.ogg
NETWORK:
*
When I visit my app in Firefox, A warning message prompts saying:
'This website [192.168.2.14] is asking to store data on your computer for offline use. Allow, Never for this site, Not Now'.
See https://dl.dropbox.com/u/83574968/ff-offline.png
I am using FF 14.0.1 stable on Ubuntu 12.04 and Chrome works fine. Apparently I can't control which browser end users use and it seems users tend to disable offline storage on seeing the warning message: see here
So, is there any way to walk around this warning message in FF if I want to use offline storage?
Thanks.
No, that's currently not possible. Removing that warning would allow developers to do some pretty horrible stuff
Here's an ongoing discussion on the subject:
https://bugzilla.mozilla.org/show_bug.cgi?id=648064#c1
How a web application can download and store over 2GB without you even knowing it

Disable Application Cache in Chrome and Safari

I’m using the AppCache in order to enable offline access for a web app. The issue is that for development every time I make a change to my JavaScript I also need to make a change to the manifest (in order to trigger a re-download of the cached field). Now I know that in FireFox you can disable the AppCache (in fact you are prompted when you first visit the page whether to grant permission to web site to store data locally) which makes it a lot more convenient for development.
My question is there a similar option for chrome and safari?
I know that I can view/Edit the AppCache in chrome via chrome://appcache-internals/, what I’m looking for is a way to disable it.
Thanks
In Chrome, use Incognito Mode. Okay, it's probably not what it was originally intended for, but it does the job. Nothing gets cached, and now developers everywhere have a handy excuse for why they might be using Incognito Mode.
I assume there's similar 'Private Browsing' functionality available in Safari.
EDIT: I see from your comment that you want to disable Cache Manifest functionality only. Try starting Chrome from a Command Line with the --disable-application-cache switch.