Comment 8 for bug 2020655

Revision history for this message
In , From-bugzilla3 (from-bugzilla3) wrote :

(In reply to Devin Bayer from comment #5)
> FF does know the original good path, because I can enter it manually in about:config. But it doesn't use it for subsequent downloads.

That's not how it works. If I understand the portal's D-Bus docs correctly, what you set in `about:config` goes into the portal via the `current_folder` argument, then the portal returns a `/run/user/<UID>/` path and, because it'd leak information to a potential attacker for a program to be able to recover the un-sandboxed path from the sandboxed one, Firefox has no choice but to assume that you changed the directory from the one it remembers and save the new one.

I can't remember whether a PR has been accepted, but there's been discussion on the xdg-desktop-portal bug tracker around having the file picker do that conversion so apps like Firefox still only see the sandboxed path, but the picker dialogs pretend that only un-sandboxed paths are ever being used, so the user never needs to *know* that the sandboxed paths exist.