1843037 - Security bug Spoofing via filename download (firefox focus android)

Status: RESOLVED DUPLICATE of bug 1843032

(Focus :: General, defect, P2)

Description

[Hafiizh]

Attachment: focus_downloadspoof.mp4

I found vulnerability via filename donwload using \n or \r . lead to spoof filename

step to produce:

1.open http://103.186.0.20/downloadspoof.html or downloadspoof.html
2. click "open" button
impact : victim can be spoofed will think that it is a document file and even though it is an apk file

Comment 1

[Hafiizh]

Attachment: spooffocus.jpg

Comment 2

[Daniel Veditz [:dveditz]]

The way our Android products work I would guess this is in shared "Android Components" code and will end up being a duplicate of bug 1843032.

Comment 3

[Chris Peterson [:cpeterson]]

Yes, Irene recommends we fix this bug in GeckoView or Gecko in bug 1843032, so Fenix and Focus are both fixed. I'm leaving this bug open as a reminder to test Focus after fixing bug 1843032.

Comment 4

[Daniel Veditz [:dveditz]]

(In reply to Hafiizh from comment #0)

1.open http://103.186.0.20/downloadspoof.html or downloadspoof.html

Hafiizh's server never seems to be reachable for me from California. "downloadspoof.html" refers to attachment 9343474 [details] in bug 1843032, the Fenix version of this bug.

This did turn out to be shared code so this is definitely a dupe