195952 - links to local disk paths are handled oddly

Status: RESOLVED DUPLICATE of bug 183111

(SeaMonkey :: MailNews: Message Display, defect)

Description

[Mike Coppins]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3b) Gecko/20030210
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3b) Gecko/20030210

If someone writes an email with a Windows-ish path reference in it, like:

(D:\Apps\MSOffice)

Mozilla Mail underlines from D:\ to the end of MSOffice inclusive, leaving the
brackets not part of the 'link', which is fair enough.  However, if you click on
the link, you get <drive letter> is not a registered protocol.

I would recommend tightening the code to not show Windows-type filesystem paths
as links.  I reckon a potential vulnerability in explorer could be exposed as a
result, as presumably explorer would get passed that string, and explorer might
die horribly if a malformed/malicious string were fed to it.  Possibly.

Anyway, the chances of someone wanting to open the same file path as someone
else quoting, like for example other people having installed Office in exactly
the same location as I did with this path reference, is slim.



Reproducible: Always

Steps to Reproduce:
1.
2.
3.

Comment 1

[Mike Coppins]

Attachment: screenshot of error message

Attached error message, with link that was clicked on to produce error message
visible.

Comment 2

[Matthias Versen [:Matti]]

*** This bug has been marked as a duplicate of 183111 ***