Closed Bug 159975 Opened 22 years ago Closed 21 years ago

Mac: anchor with bogus href displays file listing instead of alert

Categories

(Core :: XPCOM, defect)

PowerPC
All
defect
Not set
normal

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: bugzilla, Assigned: ccarlen)

References

()

Details

not sure if this is the appropriate component, but i chatted w/sfraser who
suggested that this might belong to conrad. pls reassign as needed.

found using 2002.07.29.05 branch commercial bits on Mac 10.1.5 and 9.1. *not* a
problem on linux or win2k.

1. download the file at this link to your machine:
http://hopey.mcom.com/tests/security/buffer-overflow/a-value.html (this issue
depends on loading the file locally).

2. bring up the file picker to open a file (File > Open File, or cmd+O).

3. select the file you downloaded in step #1 and open it in the browser.

4. click on the link called "link".

expected: because the value for the href in this link is bogus, you should get
an alert dlg which says that the file cannot be found.

actual results: oddly, i get a file listing...which lists the contents of the
installation folder (even though the bogus URL is displayed in the URL bar).
nominating (for buffy, at least).

still occurs with 2002.08.12.05-1.0 comm branch bits on mac os 9.1. (still
waiting for an appropriate os x build to test which is more recent.)
Keywords: nsbeta1
adt: nsbeta1-
Keywords: nsbeta1nsbeta1-
This behavior might have changed recently; please retest.
tested with 2003.05.15.13 comm bits on 10.2.6. no longer get a file listing. i
don't get an alert, though, saying that the link is bogus. nothing happens when
i click the link now, except for the active link color appearing when clicked.

for the most part, this isn't a problem anymore.
Status: NEW → RESOLVED
Closed: 21 years ago
Resolution: --- → WORKSFORME
Summary: Mac: anchor with bogus href displays file listing instead of alert → Mac: anchor with bogus href displays file listing instead of alert
You need to log in before you can comment on or make changes to this bug.