Comment 21 for bug 457791

Revision history for this message
Micah Gersten (micahg) wrote :

From sdwilsh upstream:
(In reply to comment #15)
> What about vacuuming only if SQLite is not compiled with SQLITE_SECURE_DELETE?
> This seems more likely to be secure than relying on distros to negatively
> impact performance of every use of SQLite in exchange for browser security.
Vacuuming is an expensive operation. Distros need to get the changes they make
to Firefox approved in order to call it Firefox (although you have Shiretoko,
so all bets are off). There are parts of Firefox that depend on
SQLITE_SECURE_DELETE, so if they want to use system SQLite, they need to
compile it that way.

compile it that way.