profiles: browsers: sort blacklist entries

See etc/templates/profile.template.

Added on commit f3d126b ("disable curl and wget in browsers based on
firefox and chromium", 2021-12-18).

Relates to #4852.

etc/profile-a-l/chromium-common.profile

@@ -17,6 +17,10 @@ noblacklist /usr/lib/chromium/chrome-sandbox
 # to have access to Gnome extensions (extensions.gnome.org) via browser connector
 #include allow-python3.inc
 
+blacklist ${PATH}/curl
+blacklist ${PATH}/wget
+blacklist ${PATH}/wget2
+
 mkdir ${HOME}/.local/share/pki
 mkdir ${HOME}/.pki
 whitelist ${HOME}/.local/share/pki
@@ -35,10 +39,6 @@ include whitelist-run-common.inc
 ?BROWSER_DISABLE_U2F: private-dev
 #private-tmp # issues when using multiple browser sessions
 
-blacklist ${PATH}/curl
-blacklist ${PATH}/wget
-blacklist ${PATH}/wget2
-
 # This prevents access to passwords saved in GNOME Keyring and KWallet, also
 # breaks Gnome connector.
 #dbus-user none

etc/profile-a-l/firefox-common.profile

@@ -17,6 +17,10 @@ include firefox-common.local
 noblacklist ${HOME}/.local/share/pki
 noblacklist ${HOME}/.pki
 
+blacklist ${PATH}/curl
+blacklist ${PATH}/wget
+blacklist ${PATH}/wget2
+
 include disable-common.inc
 include disable-devel.inc
 include disable-exec.inc
@@ -66,10 +70,6 @@ disable-mnt
 private-etc @tls-ca,@x11,mailcap,mime.types,os-release
 private-tmp
 
-blacklist ${PATH}/curl
-blacklist ${PATH}/wget
-blacklist ${PATH}/wget2
-
 # 'dbus-user none' breaks various desktop integration features like global menus, native notifications,
 # Gnome connector, KDE connect and power management on KDE Plasma.
 dbus-user none