1271118 - Prevent from creating unlimited "Launch Application" and "Opening" external software prompts

Status: VERIFIED DUPLICATE of bug 167475

(Firefox :: File Handling, defect, P3)

Description

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/reply/question/etc.)]

We should prevent Firefox from creating unlimited "Launch Application" and "Opening" ("Open with" and "Save File") and other external software prompts to prevent some odd trap and prank websites pages hanging and making Firefox unresponsive and slow, even with e10s enabled.

I think the good limit could be 10 or at least some less than 20.

Comment 1

[Ryan VanderMeulen [:RyanVM]]

How is this different from bug 432687?

Comment 2

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/reply/question/etc.)]

Bug #432687 is the meta bug now.
What's more, I'm not seeing there any "Launch Application" and "Opening" ("Open with" and "Save File") and other external software prompts related stuff there.

(from bug #432687 comment #0)
> User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; fr; rv:1.9b5)
> Gecko/2008041515 Firefox/3.0b5
> Build Identifier: Mozilla/5.0 (X11; U; Linux x86_64; fr; rv:1.9b5)
> Gecko/2008041515 Firefox/3.0b5
> 
> There are javascript based websites that are traps which cause Firefox to
> show nasty content and stop answering user requests. Firefox behavior in
> these situations is really bad since it obey to the code and stop to listen
> to the user, it's not possible to close, change the configuration, close the
> tab or even exit Firefox!
> 
> A good example is this website (WARNING, this website shows pornographic
> content and you will not be able to close it without killing Firefox :
> 
> www.mylazysundays.com
> 
> Reproducible: Always
> 
> Steps to Reproduce:
> 1.
> 2.
> 3.
> Actual Results:  
> Impossible to move/maximize/close the Firefox window, impossible to change
> the website, impossible to close the tab and impossible to modify the
> Firefox configuration.
> 
> Expected Results:  
> Firefox should accept the user request to change the website or to close the
> website, and should not accept javascript code which cause Firefox main
> window to run on the screen and refuse the mouse.
> 
> Even if it's javascript, it's a major issue that Firefox refuse any user
> request in these conditions. There is no reason to justify the user losing
> control over Firefox.
> 
> Firefox should really give the possibility to the user to exit this webpage.

Comment 3

[William Hsu [:whsu]]

This seems to be a product requirement.

@ Wesly, are we going to develop this feature while we enhance content handling?

Comment 4

[Wesly Huang (EPM)]

Thanks William for query and no, I don't see this requirement being covered in our current UX spec. But this might be something to consider in the future. Ping UX people for comment.

@Morpheus, please feel free to let us know your thought about this, thanks.

Comment 5

[Morpheus Chen [:morpheus] UX]

After consulting with engineers, I also don't think we need to define this in the scope of Content Handling project. Instead, it might need to be considered by an overall UX design and consistent technical solution.

Comment 6

[Wesly Huang (EPM)]

Thanks Morpheus for the check, and I support the conclusion!

Comment 7

[William Hsu [:whsu]]

Set priority to P3.
Put this bug to backlog.

Comment 11

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/reply/question/etc.)]

Cleaning per duplicate.