Firefox for Android still seems to be behind Chromium-based browsers in some important security areas, particularly sandboxing, site isolation, process isolation, and Android WebView integration.
Chrome on Android has a strong multi process architecture that provides better separation between web content and the rest of the browser/device. Firefox has made progress with Fission, but its Android security architecture still appears to have gaps.
I would like Mozilla to prioritize:
- Stronger sandboxing and renderer isolation
- More comprehensive site isolation
- Better containment of compromised processes
- Stronger Android-specific exploit mitigations
- Improved security architecture around WebView
Firefox is known for privacy and user freedom, but security isolation is just as important. It would be disappointing if Chrome were objectively harder to compromise on Android because of architectural advantages.
Please continue improving Firefox Android's sandboxing and isolation so it can compete with Chromium not only on privacy, but also on security.
Additional, how come firefox is the only browser that's completely dependent on add-ons for dark webpages. For some reason team doesn't wanna touch these kind of issues.
