Closed Bug 1605102 Opened 4 years ago Closed 4 years ago

Always ask what to do for text/plain mimetype combined with ApplicationReputation file extensions (and disable/hide the checkbox in this case)

Categories

(Firefox :: File Handling, task, P1)

task

Tracking

()

RESOLVED FIXED
Firefox 74
Tracking Status
firefox-esr68 --- wontfix
firefox72 --- wontfix
firefox73 --- wontfix
firefox74 --- fixed

People

(Reporter: Gijs, Assigned: Gijs)

References

Details

(Keywords: sec-want, Whiteboard: [post-critsmash-triage][adv-main74-])

Attachments

(2 files)

See bug 1568003 comment 62.

Given the nature of text/plain, I believe the existing code at https://searchfox.org/mozilla-central/rev/04d8e7629354bab9e6a285183e763410860c5006/uriloader/exthandler/nsExternalHelperAppService.cpp#1658-1663 is currently sufficient, but we are likely to want to adjust some of this if/when we fix bug 453455, so having an explicit check here seems prudent.

Keeping this hidden as long as bug 1568003 is.

... and of course, we should also not allow users to save this preference - they will just be disappointed in future.

Summary: Always ask what to do for text/plain mimetype combined with ApplicationReputation file extensions → Always ask what to do for text/plain mimetype combined with ApplicationReputation file extensions (and disable/hide the checkbox in this case)

Depends on D58674

I still need to file a follow-up for tests.

Flags: needinfo?(gijskruitbosch+bugs)

Given the regressions from the other bug, let's not try and uplift this into 73, even though I think one of the patches here currently makes 0 practical difference.

Flags: needinfo?(gijskruitbosch+bugs)
Flags: qe-verify-
Whiteboard: [post-critsmash-triage]
Whiteboard: [post-critsmash-triage] → [post-critsmash-triage][adv-main74-]
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: