Burp's browser settings - Port Swigger

Summary: PortSwigger's documentation for the Burp's browser settings page describes a Store browser data checkbox that controls whether Burp's browser keeps settings and history in a specified folder, with a Clear all option to delete past data. It also documents an Allow Burp's browser to run without a sandbox setting, noting that scanning hostile websites without the sandbox increases the risk of the local system being compromised.
What you should know: The page states Burp's browser is sandboxed by default and that disabling it while scanning hostile websites raises the risk of local system compromise, a trade-off any team running browser-powered scans on Linux as root may face.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026