1447755 - Email links automatcally open in email program

Status: RESOLVED WONTFIX

(Firefox :: Untriaged, defect)

Description

[Yigit Can Yilmaz]

Attachment: proofof.html

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36

Steps to reproduce:

1- Open "proofof.html" with Firefox latest version


Actual results:

A Website can open the application without user permission with Mozilla Firefox and A website can command the any application with Mozilla Firefox


Expected results:

Question function should be add(for example: "Do you want open it in Mail ?")
Firefox asks questions to start other apps but does not ask for mail. Website can do it consistently for some ads or malafide(+18 App Store app redirecting or +18 Personnel Phone Numbers can open in Messages. Website can create a erotic or spam content mail.)People may encounter things they do not want to see

Comment 1

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Thanks for the report, but I don't see any risk here. This is intended behavior - its the same thing that happens if you click a mailto: link. You can change the behavior in about:preferences (the "Applications" section) if you don't like it. 

A website can trigger the same click by just doing:
var a = document.createElement('a');a.href='mailto:[e-mail]';document.body.append(a);a.click()

Chrome has the same behavior as Fireofx. Safari actually prompts before allowing it which is what you are asking for I think. I don't see much benefit to the user by adding this prompt. I don't see any reason to change our current behavior here so Im closing this as a wont fix.