diff --git a/hosts/common/programs/tor-browser.nix b/hosts/common/programs/tor-browser.nix
index 9a672cbb5..70dfbace3 100644
--- a/hosts/common/programs/tor-browser.nix
+++ b/hosts/common/programs/tor-browser.nix
@@ -17,10 +17,10 @@
     });
     sandbox.net = "clearnet";  # tor over VPN wouldn't make sense
     sandbox.whitelistAudio = true;
-    sandbox.whitelistDbus.user.own = [ "org.mozilla.firefox.*" ];  # so that `tor-browser http://...` can open using an existing instance
+    # sandbox.whitelistDbus.user.own = [ "org.mozilla.firefox.*" ];  # so that `tor-browser http://...` can open using an existing instance
     sandbox.whitelistPortal = [
       "FileChooser"
-      "OpenURI"
+      # "OpenURI"
     ];
     sandbox.whitelistWayland = true;
     # sandbox.mesaCacheDir = ".cache/tor-browser/mesa";  # don't persist mesa dir (privacy)