1020031 - retrieve cookie from firefox by uploading file

Status: RESOLVED INVALID

(Firefox :: Untriaged, defect)

Description

[nico]

Attachment: step6 launch on firefox and cookie.JPG

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:29.0) Gecko/20100101 Firefox/29.0 (Beta/Release)
Build ID: 20140506152807

Steps to reproduce:

testcase : 
windows7 / firefox 29.0.1 (javascript enabled) 

I just found a way to retrieve the cookie from firefox by uploading a small file on file;///Users/..., created with google chrome in my test. 

test: 
windows7 / firefox 29.0.1 (javascript enabled) ... and...google chrome 34.0.1847.137 
Create the file using google chrome, there must be other ways to do ...) 

--- steps: 
--Step 1:
In the url bar google chrome, insert the following: 
data: application <img%20src="/"=_="title="onerror='javascript:alert(document.cookie)'"> 
Press enter. 
--- Step 2:
A file is downloaded. 
--- Step 3: 
Click on the file 
--- Step 4 :
-> Open with 
--- Step 5 :
-> Firefox 
Same process doesn't work with mac osx 10.6.8 / firefox 29.0.1, and chrome 35.0.1916.114 .


Actual results:

once launched obtained in firefox file :/ / / Users / ...... (STEP6)( on attachment)

I hope to have been clear in my explanations.
PoC on attachement 
i have others captures (PoC) and a copy of file generated by google chrome , if is necessary.

Comment 1

[nico]

Attachment: step1 file creation on chrome.JPG

Comment 2

[nico]

Attachment: step2 clic on file.JPG

Comment 3

[nico]

Attachment: step3 clic open.JPG

Comment 4

[nico]

Attachment: step4 clic on firefox.JPG

Comment 5

[nico]

Attachment: step5 clic open.JPG

Comment 6

[nico]

Attachment: test edited on chrome

Comment 7

[nico]

I don't know if this is important, but it doesn't work with other browsers (explorer, chrome)

Comment 8

[Daniel Veditz [:dveditz]]

You could also just edit a local file (using notepad or whatever) to create your test.

There are known differences in how the various browsers handle file:/// urls. Since those are generally not accessible from "the web" they were intended for development. Interesting that you're seeing google analytics cookies saved for local files. At some other time in the past you opened a locally-saved file that has google analytics and it set a cookie. You may not have done that in other browsers which is why those browsers don't have local cookies stored.

IE would probably do the same if you let it run scripts (which are disabled by default for file: urls).

Comment 9

[nico]

ok thank you for your respond.