local file:// links are opened on middle-click

RESOLVED DUPLICATE of bug 148418

Status

()

Core
Security: CAPS
RESOLVED DUPLICATE of bug 148418
16 years ago
16 years ago

People

(Reporter: Ole Marggraf, Assigned: dougt)

Tracking

Trunk
x86
Linux
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Reporter)

Description

16 years ago
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.1a) Gecko/20020610
BuildID:    2002061108

When middle-clicking on a local file:// link, this link is opened into a new
tab/window (as I described in the (correctly) closed bug #151253).

According to bug #84128, opening local file:// links is disabled due to security
concerns. All other methods of opening such a link are disabled, but this one
seems to be still working well. This behaviour might thus be considered as a
security hole.

Even if not for security reasons, middle-clicking on file:// links should be
disabled as well, for reasons of consistency.

Reproducible: Always
Steps to Reproduce:
1. middle-click on a local file:// link



Actual Results:  The local file will be displayed in a new tab/window.

Expected Results:  Noting should happen (as discussed in bug #84128).

Comment 1

16 years ago
related: bug 148418

*** This bug has been marked as a duplicate of 148418 ***
Status: UNCONFIRMED → RESOLVED
Last Resolved: 16 years ago
Resolution: --- → DUPLICATE

Updated

16 years ago
Component: Networking: File → Security: CAPS
QA Contact: benc → bsharma
You need to log in before you can comment on or make changes to this bug.