Custom search with Virustotal: Complete URLs not supported
Categories
(Firefox for Android :: Search, defect)
Tracking
()
People
(Reporter: Webworkr, Unassigned)
Details
Attachments
(2 files)
Screenshot_20240420_102843_Firefox Nightly.jpg
User Agent: Mozilla/5.0 (Linux; Android 14; Mobile; rv:127.0) Gecko/127.0 Firefox/127.0
Steps to reproduce:
A user-defined search using Virustotal.com has been set up.
In addition to domains, complete URLs can also be checked.
- I have selected the search provider Virustotal.
- Entered the URL to be checked in the address bar.
Actual results:
Domains can be checked using this procedure, URLs cannot.
Virustotal reports an error.
Expected results:
The entered URL should be properly transferred to the Virustotal website as a search string.
|
Reporter | |
Comment 1•2 years ago
|
||
VirusTotal error message when submitting a complete URL via the custom search.
|
|
Reporter | |
Comment 2•2 years ago
|
||
Result of a URL search if you use the search form directly on Virustotal.
|
|
Reporter | |
Comment 3•2 years ago
|
||
Related to bug 1877530.
|
||
Comment 4•2 years ago
|
||
I've tried this on Fenix, Firefox Desktop and Google Chrome and they all behave the same way.
The url that VirusTotal suggests for search via their OpenSearch definition is https://www.virustotal.com/gui/search/%s, i.e. the search term is part of the path of the URL.
When I tried to do a search via the built-in facilities, the url is: https://www.virustotal.com/gui/search/https%3A%2F%2Fbugzilla.mozilla.org
If I look at what VirusTotal wants, this url would work: https://www.virustotal.com/gui/search/https%253A%252F%252Fbugzilla.mozilla.org
What they've done here is to encode the search term parameters twice. Our understanding of the spec is that this is unnecessary and unexpected. The only other site I could easily find that uses this method works fine with single encoding: https://dict.leo.org/englisch-deutsch/https%3A%2F%2Fbugzilla.mozilla.org
As a result, I believe this is an issue with VirusTotal not conforming to the specification, and therefore it should be raised with them.
Description
•