Closed Bug 1743196 Opened 4 years ago Closed 4 years ago

Firefox android is not allowed to open .html files from android storage

Categories

(Firefox for Android :: General, task)

All
Android
task

Tracking

()

RESOLVED WONTFIX

People

(Reporter: hackerone3117, Unassigned)

References

()

Details

(Keywords: reporter-external, Whiteboard: [reporter-external] [web-bounty-form] [verif?])

hello team,
I see your Android version of Firefox is a little disappointing, where the html file that is loaded in the Android storage can't be accessed through your Firefox, why does that happen? other browsers can open it..

production step:

  1. create a file with the extension test.html
  2. then save in your storage (Android)
  3. then open the file, you will see Firefox does not respond to open the html file

Impact :
here, someone else wants to test his task through the html extension, because Firefox does not respond to html files in buma on Android Firefox, Firefox users will switch browsers. Gradually Firefox will run out of users

Flags: sec-bounty?

I put POC videos on Drive link, you can view them now.
https://drive.google.com/file/d/1R0cUi6AUGlYALG1ASnOLdlaqrQc2PsOK/view?usp=sharing

hello update

Hi Irwan, this is working as intended please take a look to GitHub ticket for more information
https://github.com/mozilla-mobile/fenix/issues/4049

Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Resolution: --- → WONTFIX
Group: websites-security → mobile-core-security
Component: Other → Security: Android
Product: Websites → Fenix
Group: mobile-core-security

This is the opposite of a security bug: content you can't open can't hack you. Not eligible for a bug bounty.

Flags: sec-bounty? → sec-bounty+

Correcting flag

Flags: sec-bounty+ → sec-bounty-
Component: Security: Android → General
OS: All → Android
Duplicate of this bug: 1867998
You need to log in before you can comment on or make changes to this bug.