333900 - Mozilla opens executable files automatically when we download a file but doesn't offer us the opportunity to save the file

Status: RESOLVED WORKSFORME

(Firefox :: File Handling, defect)

Description

[Philip Neves]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20060202 Fedora/1.0.7-1.2.fc4 Firefox/1.0.7
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20060202 Fedora/1.0.7-1.2.fc4 Firefox/1.0.7

This is a bug in the version that comes with fedora core 4 and any other version of firefox.  When I download a windows app to eventually run in wine it runs the app automatically. It offers us no opportunity so save the app on the computer. This is a vital security check that is annoying not to have. 

I want to test the windows app in wine and the damn browser just runs it. Please fix. Unless your trying to infest peoples computers with spyware.  

Reproducible: Always

Steps to Reproduce:
1. Click on download. 


Actual Results:  
Program installs just as intended but it should give us a dialog box asking us if we at least want to save.  

Expected Results:  
Program installed. 

Please fix this serious security hole.

Comment 1

[Jo Hermans]

For Firefox, it's not an executable file, but a document that is opened by an application (here: Wine).

The document should have been saved on the desktop first, or at whatever folder is set in Tools-Options->Download. You can change if you should be prompted for a folder first, and what to do witht he file afterwards. If you don't want the file to open in Wine automatically, change the download action !

I'm not running Fedora or any other Linux version myself, but are you using a version that has been chnaged form the standard Firefox version ? Or did you change the default action yourself ? 

Comment 2

[Philip Neves]

I'm using what ever came installed on Fedora Core 4 with the latest updates installed. But thanks for the tip. 

Comment 3

[Philip Withnall (unavailable)]

Can you reproduce this after clearing the download actions list in a Mozilla build of Firefox 1.5.0.2?

Comment 4

[Philip Neves]

I haven't been on 1.5.0.2 because the fedora project hasn't updated the browser to 1.5.0.2 yet. I update my software on my computer when I run an update using that project. Its not the best way but I want to be able to add and remove packages without polluting things with compiled code. 

For some reason the people who are doing the fedora project don't see it necessary to upgrade to 1.5. So the version I have is 1.0.7.  

Comment 5

[Philip Withnall (unavailable)]

We can't field bug reports from outdated versions, because it's highly likely that such bugs would be fixed in a more recent version.
If you're not willing to download either the source code for 1.5.0.2 and compile it yourself, or download a precompiled binary, I'm going to mark this bug as WORKSFORME.