diff --git a/hosts/common/programs/firefox-xdg-open.nix b/hosts/common/programs/firefox-xdg-open.nix
index fe86cc637..ab8ef18b4 100644
--- a/hosts/common/programs/firefox-xdg-open.nix
+++ b/hosts/common/programs/firefox-xdg-open.nix
@@ -3,7 +3,9 @@
   sane.programs.firefox-xdg-open = {
     packageUnwrapped = pkgs.firefox-extensions.firefox-xdg-open.systemComponent;
 
-    sandbox.whitelistDbus.user = true;  #< TODO: reduce  # for xdg-open/portals
+    sandbox.whitelistPortal = [
+      "OpenURI"
+    ];
 
     mime.associations."x-scheme-handler/xdg-open" = "xdg-open.desktop";