From 11221f7f6fde8f932f5be6ca1a7acbf8bdf0cb5a Mon Sep 17 00:00:00 2001
From: Charlotte Van Petegem <charlotte@vanpetegem.me>
Date: Sun, 10 Apr 2022 11:03:33 +0200
Subject: [PATCH] Switch to a more secure work-around

---
 modules/graphical/firefox/default.nix | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/modules/graphical/firefox/default.nix b/modules/graphical/firefox/default.nix
index 4a5867bb..1bc3dab9 100644
--- a/modules/graphical/firefox/default.nix
+++ b/modules/graphical/firefox/default.nix
@@ -66,10 +66,6 @@ in
       { path = ".cache/mozilla"; type = "cache"; }
     ];
     home-manager.users.charlotte = { ... }: {
-      home.sessionVariables = {
-        # This is like, really insecure. Disable ASAP.
-        MOZ_DISABLE_CONTENT_SANDBOX = "1";
-      };
       programs = {
         browserpass = {
           enable = true;
@@ -105,6 +101,7 @@ in
             "privacy.trackingprotection.enabled" = true;
             "privacy.trackingprotection.socialtracking.enabled" = true;
             "security.identityblock.show_extended_validation" = true;
+            "security.sandbox.content.level" = 3;
           };
         };
       };