Open Bug 1532168 Opened 5 years ago Updated 2 months ago

Proxy PAC script should not support file:// protocol

Categories

(Core :: Networking: Proxy, defect, P3)

defect

Tracking

()

UNCONFIRMED

People

(Reporter: meet.again.someday, Unassigned)

References

Details

(Keywords: parity-chrome, Whiteboard: [necko-triaged])

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36

Steps to reproduce:

Set proxy script in the system configurations pointing to a PAC file using file://

Actual results:

The browser loads the PAC file and interprets it correctly.

Expected results:

Ignore the PAC file and not supporting loading PAC script via file:// from the system settings.

Lets me explain more.
This bug report is weird to you as it was weird to me.
This bug originates from the Chromium development team.

They said that setting system PAC script via file:// isn't a valid proxy setting. It is arguably a bug that applications such as Chrome and Firefox interpreted the file:// there.

From here exactly:
https://bugs.chromium.org/p/chromium/issues/detail?id=839566

So they removed the support for file:// and plan on creating Chromium only solution to support loading PAC script from local file.
This makes Firefox the only major browser that supports loading PAC via file:// in the system setting.

Now it is truly pointless to set file:// PAC there because it will be exclusively for Firefox alone. No other browsers respect the same setting.
Might as well move the setting into the browser instead of relying on system settings, like what Chrome just did.

I too really like the feature and think that It was a Microsoft&Safari bug.
There will be some uproar if Mozilla does it too, but I guess it is the way forward.

That particular OS feature never intends to support PAC setting this way.

Component: Untriaged → Networking
Keywords: parity-chrome
OS: Unspecified → All
Product: Firefox → Core
Hardware: Unspecified → All

There are compatibility problems if Firefox is the only browser to support that "feature" and that means that it's no reason to remove that feature.

Why should that "feature" get removed ?

No, sorry I did not address it well enough.
The main focus is not about getting the feature "removed", but about providing PAC file configuration internally, in case the file is on local storage.
I agreed that the subject might set the wrong implication.

P3 for now.

We can consider how to implement this when the sandboxing for socket process is done.

Depends on: 1531892
Priority: -- → P3
Whiteboard: [necko-triaged]
Severity: normal → S3

Moving bug to Core/Networking: Proxy.

Component: Networking → Networking: Proxy
You need to log in before you can comment on or make changes to this bug.