The source of an <img> html element should only load valid image formats.

UNCONFIRMED
Unassigned

Status

()

P3
normal
UNCONFIRMED
11 months ago
7 months ago

People

(Reporter: jm.acuna73, Unassigned)

Tracking

55 Branch
Points:
---

Firefox Tracking Flags

(firefox57 wontfix, firefox58 wontfix, firefox59 ?)

Details

(Reporter)

Description

11 months ago
User Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36

Steps to reproduce:

Go to:

data:text/html,<img src="https://feeds.feedburner.com/GoogleInbox"/>


Actual results:

The image executes the windows authentication dialog

Updated

11 months ago
Component: Untriaged → Layout: Images
Product: Firefox → Core

Updated

11 months ago
Priority: -- → P3

Updated

11 months ago
status-firefox57: --- → wontfix
status-firefox58: --- → fix-optional
You need to log in before you can comment on or make changes to this bug.