Closed Bug 1706271 Opened 4 years ago Closed 3 years ago

Try to upgrade ftp:// URLs to https:// URLs

Categories

(Core :: DOM: Security, enhancement, P3)

Product:
Core
Component:
DOM: Security
Type:
enhancement

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: hsivonen, Unassigned)

References

(Blocks 1 open bug)

Details

(Whiteboard: [domsecurity-backlog1])

Steps to reproduce

  1. Click the link ftp://ftp.funet.fi/pub/

Actual results

Firefox prompts the user to choose an external application.

Expected results

Expected Firefox to first try if upgrading the link to https works and only show the external app prompt if the upgrade fails. These days, the upgrade would often work. In this case https://ftp.funet.fi/pub/ would work.

I think this is a great idea.
The fallback from trying HTTPS back to an external protocol might be a little tricky, but probably worth doing.

Blocks: https-only-mode
Component: Networking: FTP → DOM: Security

Yeah, that sounds reasonable to me too - let's do that!

Severity: -- → S3
Priority: -- → P3
Whiteboard: [domsecurity-backlog1]

FWIW, we just landed 'https-first' which tries to upgrade the top-level URL to https and falls back to http if not available - I think the fallback here could live at a very similar place in DocumentLostLIstener.cpp -> see https://hg.mozilla.org/mozilla-central/rev/7b2615a656e4#l17.36

We don't support ftp: anymore anyway, let's close this bug...

Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.