How to Sniff & Disable Firebug
If you're a hardcore Web Developer like me, you're probably well aware of the excellent Firefox plugin known as Firebug. Firebug's built in tools for monitoring and debugging CSS, HTML, and JavaScript/AJAX can improve development time efficiency exponentially.
As great as Firebug is, using Firebug does have its disadvantages while browsing websites that perform numerous AJAX requests. Firebug chokes on trying to analyze and display all of the information that it can make Firefox hang up. This, of course, is followed by [CONTROL] + [ALT] + [DELETE] and a restart of Firefox. Two such websites that warn users about this problem are Gmail and NetVibes.
If you fear that a website you are developing could cause problems for visitors with Firebug enabled, you have a few options for preventing problems.
Sniffing Firebug and Displaying A Message
The following JavaScript sniffs for Firebug. You could use this to display a "Please disable Firebug..." type of message.
if (window.console && window.console.firebug) {
/* firebug found! */
}
Disable Firebug Functionality
The following JavaScript code doesn't disable Firebug but renders some problem functionality useless. The following snippet of code was taken from Yahoo! Media Player.
if (! ('console' in window) || !('firebug' in console)) {
var names = ['log', 'debug', 'info', 'warn', 'error', 'assert', 'dir', 'dirxml', 'group', 'groupEnd', 'time', 'timeEnd', 'count', 'trace', 'profile', 'profileEnd'];
window.console = {};
for (var i = 0; i < names.length; ++i) window.console[names[i]] = function() {};
}
Excellent snippets, saves a lot of source code viewing and google searching. You can see that firebug does have quite an impact on the web.
One thing that *I* think happened to my firefox, was that it can’t be opened right now. I’ve restarted my machine multiple times and I get the message “Firefox is already running.” I got the message a lot on linux machines and that usually just involved me deleting my profile folder in .mozilla , but I am not too sure where this folder exists in my windows box. The issue in the linux, was that I did not close the firefox window in another linux box when I logged off (all of the linuxes box where networked together using nfs so my data will be the same regardless of which box I logged into) I am willing to bet this is firebug related, since the last time I used it, firefox abruptly closed after opening like the 30th tab. /endrant
I’m not sure if that’s a Firebug issue but it happens to me quite a bit with fire fox. The fix for that is going into windows task manager, hit the processes tab and look for the file named “firefox.exe”, once found, highlight it and then click the end process button. Now start up firefox…should work again.
interesting!
Is there any way to disable Firebug if the user has javascripts disabled?
Thank you,
Melindrea
@Melindrea: I don’t believe so.
Thanks anyways. =)
This really great script i’ve ever see can execute Firebug. I use firebug but i hate it when they see all activity on my web. Now i’m good
I tried that solution to disabling firebug but doesnt excatly work right, would you have any idea how to disable the acutally console fully..
It doesn’t work,
I can detect whether firebug is installed or not, but i cant stop it.
I need to hide the url’s i call with ajax, but in the firebug’s panel it is all open
@Jesus DeLaTorre try this command line:
sudo killall -9 firefox
and then restart your Firefox
The sniffing code correctly detects Firebug, but the code that supposedly disables Firebug functionality runs only in the absence of Firebug. As I read it, that code is intended to prevent Firebug function calls from within the Yahoo! media player from throwing errors in browsers that don’t have Firebug installed.
If you’re terribly concerned with people using Firebug’s console on your site, you could try the following to hinder them:
if (window.console && window.console.firebug) { for (var x in console) { delete console[x]; } }Keep in mind that this affects only the console of Firebug; all other features will likely work normally. Also, while Firebug is immensely popular, it is far from the only tool to execute user Javascript.
Cheers =)
Hi, i would like to know, how i can disable firebug on a bebo application page. I have developed a bebo application, using php and bebo api. But the casual javascript code to disable firebug does not work there.
Please, can any body tell me, how i can disable the javascript there, as the firebug is driving me mad, when users crack the game and cheat with the points.
Worked great if console was enabled, but we found that a user doesn’t have to have Console enabled to run Net enabled and that having the Net panel enabled causes js conflicts. Has anyone else found a way to detect if the other panels, such Net are enabled when Console is not?
There is NO WAY of stopping firebug, not stopping each and every other possible plugin that can sniff or execute code inside your page. The problem is that, being javascript delivered as source code and executing on client machines, it is possible for everyone to read, reverse engineer, modify and do whatever they want with your javascript code.
You should write applications that have server side checks to prevent cheating/sniffing/whatelse on the client, cause client computer IS NOT a safe environment, firebug or not firebug.
Scripts given in this post are useful to display a warning to the user like “Hey, fellow developer, so you are using firebug … it can make this site really slow”, not to prevent him from looking at your code or “playing” with your javascript, cause there is no way of doing it anyway.
thanks for providing this code but there is a small change
if (window.console && window.console.firebug) { console.clear(); }Hi, I’m trying to close Firefox when I detect Firebug but with no success…
if (window.console && window.console.firebug) { window.opener='X'; window.open('','_parent',''); window.close(); }Firefox doesn’t allow
window.closeif (window.console && window.console.firebug) { window.location = "chrome://mozapps/content/profile/profileSelection.xul"; }Try the chrome URL in your Firefox, it will close it…
Then I have found the close function directly into the
firebugOverlay.xuland firebug.js files but I don’t know how I can call it with javascriptin the xul file : oncommand=”Firebug.closeFirebug(true)”
in the js file :
closeFirebug: function(userCommand) // this is really deactivate { var browser = FirebugChrome.getCurrentBrowser(); TabWatcher.unwatchBrowser(browser, userCommand); Firebug.resetTooltip(); }If someone know how to do let us know.
firebug.js is included in the Firebug Extension. It contains some code that can not have the permission to execute in the web page.
There is any way to hide Firebug to prevent some site to try block it?
I read you post and that is helpful and good for hint but i am unable to disable or clear firebug events. can you please provide me the code script with example for more help.
Also very funny:
if(window.console.firebug) { document.body.innerHTML = "PLEASE DO NOT USE FIREBUG" };I know this is a REALLY old post (from 2008), but it came up as I was googling around for alternative ways of detecting firebug (which was injecting an error into a jQuery script when enabled).
window.console.firebugwas removed due to privacy concerns, so it no longer works. detecting the console object isn’t useful because all major modern browsers have that object now (yup, even IE!). I haven’t found a reliable way, and apparently if I were to it would actually be considered a security issue in the firebug plugin… Since comments don’t appear to display dates: (04/11/2012)That’s why developers of tools and software, need to think sometimes about security not only of one side – client side, but about other side too.