← Back to context

Comment by cookiengineer

6 hours ago

For Work they actively deactivate Linux users for "security reasons", or Microsoft makes their web apps intentionally hostile like disabling copy/paste or disabling photo/picture or file uploads for Linux users when you're allowed in the policies.

Turns out, it's bypassable. They just check the User Agent and Sec-CH headers, so I built a small browser extension for Chrome that allows to modify those headers.

On top of that I built chromium-profiles [1], my tool for managing those isolated sandboxes so that I can tweak/change them based on the stupid policies per O365 tenant I have to work with.

So I use 3 different profiles for 3 different customers with 3 different security policies set for their organization... For being allowed to use a freaking web app.

That, for me, is the only reason I still have to have chromium installed. Microsoft stupidity.

I wish Firefox would focus on this sort of use case, like the "--pwa" and "--user-data" CLI flags and preinstallable extensions for those profiles. But it can't be done due to how they manage extensions with their own signing cert, how dev mode extensions are always cleared etc. Well, apart from Microsoft intentionally making webapps unusable in Firefox.

[1] https://github.com/cookiengineer/chromium-profiles