Skip to main content

Browser add-ons settings

There are a few add-ons for Mozilla Firefox that will limit browser functionality for the benefit of better security and to protect the user from tracking software. The following tips and hints will help you configure some of the add-ons that are commonly used with Firefox.

Javascript settings for NoScript

NoScript is a browser add-on that not only provides users with detailed control over how the websites they visit may use Javascript, it also offers many other security features (For example, protection against cross-scripting attacks, web bugs, click-hijacking, and more). We expressly recommend that users of Mozilla Firefox install the NoScript add-on.
However, to enjoy the full functionality of the mailbox.org website and your online office software, Javascript needs to be enabled for *.mailbox.org:

In order to protect our systems against spammers who try to bulk-register accounts on our website, it has been necessary to also temporarily enable Javascript for the domains „**https://google.com**“ and „**https://gstatic.com**“, so as to be able to display a Google reCaptcha during registration. Although we may still sometimes use a reCaptcha in individual cases, we are now for the most part using a security system of our own that is no longer dependent on external services, like Google

Web fonts

Web fonts blocked:

Webfonts allowed:

NoScript can be configured to stop the dynamic loading of web-based fonts. If web fonts are blocked, then this will have an impact on how our website is displayed in the browser. If web-based fonts are blocked, some symbols in the navigation bar may not be shown properly.

mailbox.org needs cookies for account registration to work properly, for the mailbox.org Office, and for the login to our discussion forum. Please configure your cookie settings accordingly. If your browser has been set up to block all cookies by default, then please create an exception for „**https://mailbox.org**“. See below how this would look like in the cookie settings dialog of the Firefox browser:

Ad blockers

If you use ad blockers, we recommend disabling them for the domain „office.mailbox.org“ to avoid display issues with some of the symbols used in the web interface. The mailbox.org Office will never show you any ads and does not make use of tracking scripts either.

However, some ad blockers are known to change the presentation layout of web pages, and this may affect functional elements of the mailbox.org Office, in such a way that some parts may not get displayed properly or refuse to work entirely as a result.

Further, some ad blockers tend to disable the dynamic loading of the web fonts that are needed to display functional elements on the page. If that happens, then users will see only cryptic symbols instead of usual icons of the tool bar in the mailbox.org Office.

uBlock origin

Use the buttons indicated in the figure to enable the functionality that is needed by office.mailbox.org, when required. This can be done directly in the uBlock pop-up panel.

Without web fonts, the page won’t be displayed correctly

It only takes three clicks to permit the download of web fonts for the mailbox.org Office.
However, you will only need to do this if you configured your browser to block all web fonts by default.

Canvas Blocker

The „CanvasBlocker“ add-on restricts web applications from using part or all of the Canvas API, with the purpose of preventing tracker software from obtaining information from Canvas elements.
However, the mailbox.org Office relies on Canvas elements for its word processing, spreadsheet, and presentation software. It is for this reason that the web interface will check and confirm during login if access to the full Canvas API is available and complain if that is not the case. Without access to the Canvas API, a login will not be possible.

If your browser has the CanvasBlocker add-on, you can simply add an exception in the CanvasBlocker settings. For everything to work, you need to add the domain „office.mailbox.org“ to the whitelist. If whitelisted domains are allowed to use the API, then there is no need to disable the add-on in order to enjoy the full functionality of the mailbox.org Office.