91164 - file:///link on webpage does not work

Status: VERIFIED DUPLICATE of bug 84128

(Core :: Security, defect)

Description

[beanladen]

x86 Linux 2.4.6 gcc2.95 XFree86 4.0.3 and Solaris 8 any builds

A link file:///path/file.html on a webpage loaded via http does not
work, although I'm on that local machine and have access rights
to that file. The same file link entered into the url bar works.
This is inconsistent and overly restrictive (I know that this was
intentionally built in as an security feature, but it should not
prevent the user from looking at his own files !). This is a very 
often used construction in web pages to have local access to locally 
stored documentation and works with all Netscape releases.
By the way, when loading the webpage via file:///..., the links
to local files on that page work...

Expected: Mozilla should check if local access rights apply
          (as it does in the url bar) and should load the
          pages accordingly. It should deny loading if access
          rights do not apply.

Comment 1

[Chase Tingley]

I believe the pref "security.checkloaduri" can disable this globally. bug 40538
should have all the details.

*** This bug has been marked as a duplicate of 40538 ***

Comment 2

[benc]

REOPEN:
Lets use bug 84128, otherwise this is actually invalid b/c its supposed to fail
to load.

Comment 3

[Christopher Aillon (sabbatical, not receiving bugmail)]

as benc requests, this is a dupe of bug 84128


*** This bug has been marked as a duplicate of 84128 ***

Comment 4

[benc]

VERIFIED:
same problem.

Comment 5

[benc]

moving comp & qa to sec:gen.