Greetings all,
@ericmarceau you are not alone in this issue. When I first typed files:/// in the URL bar and saw the browser had full access the entire system, I was dumbfounded at how this has not been addressed.
This is why I started testing AppImages with Firejail.
In my latest ISO, which I just posted on here yesterday, I specifically defaulted the Firefox and zen-browser to AppImage with the ability to also run it in jailed mode!
By default the browser runs as a normal browser, but launching the browser using the contextual menu of the launcher (right click on the icon), also gives the option to run in jailed mode. See this thread
The default profile running in Firejail, blocks all directories in the ~/ except Documents and Downloads. But you can add your own settings in the local profile directory, ~/.config/firejail/firefox.profile
Start here on Firejail https://firejail.wordpress.com/
You are more than welcomed to try my ISO to see how it works, it all works in the LIVE ISO, no need to install. Sorry about the size…
P.S. I guess I should add the link to the ISO New DeLinuxCo ISO ready! 26.1.0