102262 - Redirects: non http|https URLs allowed in location response header?

Status: VERIFIED FIXED

(Core :: Networking: HTTP, defect)

Description

[benc]

In bug 84128, kurt prposed that a HTTP redirect might have a file URL.

------- Additional Comments From Kurt Swanson 2001-09-22 19:06 -------

I fail to see how this is a security issue.  If I choose to click on a link that
goes to my local site, who is this going to hurt, and how?  The referring page's
server can't do anything with this, nor even be aware that the user has selected
the link.  Let's even assume that the malicious web site has placed a file on my
local machine (somehow), and tricks me into accessing it through a file: link. 
What damage could mozilla do by loading this file?

In bug 101207, this case was discussed further. CheckloadURI will stop this, but
if it is off, the question, is this legal? If not, we should ignore non-html
related URLs in a redirect.

Comment 1

[neeti]

darin: what should happen?

Comment 2

[Darin Fisher]

-> future

Comment 3

[Darin Fisher]

this bug can be closed now that the patch for bug 141061 went in.

Comment 4

[benc]

Good. What a relief.

Comment 5

[John Unruh]

Verified per comment #3.