Unable to download PDFs that happen to be mixed-content
Categories
(Core :: DOM: Security, defect)
Tracking
()
People
(Reporter: dholbert, Unassigned)
Details
Attachments
(2 files)
STR:
(1) Go to about:preferences
, search for PDF, and change action to "Always Ask"
(2) Visit https://zephyronline.com/product/monsoon-i-range-hood-insert/
(3) Scroll down and select the "SPECIFICATIONS AND DOCUMENTS" tab (~halfway down the page)
(4) Click "Hood User Manual" (or any of the entries alongside it)
(Alternately: click the link in the attached testcase, instead of steps 2-4.)
EXPECTED RESULTS:
I should be able to view or save the PDF that I'm trying to download. (I told Firefox to "Always Ask" me how to handle PDFs.)
Even though it's mixed-content, we should expose a way for me to click through & proceed with the download. The web as-it-exists depends on us allowing this (perhaps with a warning, sure, but not a full block).
ACTUAL RESULTS:
- The first time I perform STR: A new tab opens, and a doorhanger notification appears below the download toolbar-icon telling me "This file could not be downloaded securely". It's not obvious that there's any option I could take to actually download the file (no click-through, etc).
- If I go back to the original tab and click the "Hood User Manual" link (or another PDF link) again, then: A new tab opens, and the Download "shrinking arrow" animation plays, and that's it. No doorhanger, no notification that something went wrong -- just silent failure.
Notes:
-
mozregression turned up bug 1614969 as the first commit that didn't prompt me to open-or-download the file:
https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=2c022fc5b638633885787aa94f1e46a7e6713956&tochange=2b1b3a41c110c7480f299e97b5e13e15dbcff9bf -
I think bug 1656296 is where we added the "This file could not be downloaded securely" message & UI.
Reporter | ||
Comment 1•4 years ago
|
||
Reporter | ||
Comment 2•4 years ago
•
|
||
ckerschb / sstreich, do you know if something is going wrong here, or is this the intended flow for this sort of scenario?
(I'm hoping it's not the intended flow, because it's tripped me up multiple times over the past few days -- I've had to fall back to: right-click the download-error-doorhanger, choose 'copy download link', open a new tab, paste, enter. That gives me the download-or-view-this-file prompt that I was expecting to get in the first place. I suspect less tech-savvy users wouldn't get that far & would just be blocked from ever opening/viewing the PDF that they're trying to see, and would be forced to use another browser.)
Reporter | ||
Comment 3•4 years ago
|
||
(In reply to Daniel Holbert [:dholbert] from comment #2)
ckerschb / sstreich, do you know if something is going wrong here, or is this the intended flow for this sort of scenario?
In particular: per bug 1656296 comment 0, it sounds like the intent is to show a dialog that lets the user choose how to proceed, but we're not doing that right now.
Reporter | ||
Comment 4•4 years ago
|
||
Reporter | ||
Comment 5•4 years ago
|
||
Ah, I guess this is a dupe of bug 1656296.
(It looks like there's an r+'d patch there [nice!] though it looks like maybe the discussion on phabricator has gone quiet for the past ~week. Hoping it can land & be fixed soon!)
Reporter | ||
Comment 6•4 years ago
|
||
Er, copypaste failure -- I meant dupe of bug 1660969.
Description
•