144860 - Privacy issue: plugin path is readable

Status: RESOLVED DUPLICATE of bug 88183

(Core :: DOM: Core & HTML, defect)

Description

[Nagy Ferenc László]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0rc2) Gecko/20020510
BuildID:    2002051009

Plugin paths are readable by Javascript. Inquiring script can observe
installation details. Moreover, if Mozilla or (some of the) plugins are
installed in the user's home directory, the script can guess the user's login name.

Reproducible: Always
Steps to Reproduce:
1.Enable Javascript if it's not enabled.
2.Go to the given URL.

Actual Results:  The script displays the plugin filenames and, with my setup, my
login name, too.

Expected Results:  I think that plugin paths should be hidden from web sites.

Source of the "exploit":

<script>
  loginname = "unknown";
  for (i = 0; i < navigator.plugins.length; i++) {
    filename = navigator.plugins[i].filename;
    document.writeln(filename, "<br>");
    if (filename.substr(0, 6) == "/home/") {
      loginname = filename.substr(6, filename.indexOf("/", 6) - 6);
    }
  }
  document.writeln("<br>Possible login name: <b>", loginname, "</b>");
</script>

Comment 1

[Jesse Ruderman]

Confirmed.  Only the filename and maybe the parent directory should be visible
to web pages.

Comment 2

[Bradley Baetz (:bbaetz)]

ISTR this being a dupe of a bug I filed last year some time. Can't seem to find
it now, though.

Comment 3

[Jesse Ruderman]

*** This bug has been marked as a duplicate of 88183 ***