223248 - Page links to about:config, about:cache don't work (nothing happens). Link to about: works. HTML is fine.

Status: RESOLVED INVALID

(Core :: Security, defect)

Description

[Matthew Elvey]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.6a) Gecko/20031020
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.6a) Gecko/20031020


This is a snippet from the page source; looks fine to me:
visit the URL <a href="about:config">about:config</a> 
  <font size="1">(A mozilla bug prevents that link from working; <a
href="about:">about:</a> 
  <a href="about:cache"> about:cache</a> too)

I'd guess whatever makes plain about: work should make this work.

Reproducible: Always

Steps to Reproduce:

Actual Results:  
When I click on link to about:config, nothing happens.

Comment 1

[Matthias Versen [:Matti]]

Do you disabled Javascript ?

Comment 2

[Christian :Biesinger (don't email me, ping me on IRC)]

-> security:general, but that's intentional afaik. also take a look at the JS
COnsole

Comment 3

[Christopher Aillon (sabbatical, not receiving bugmail)]

Yes, this is by design.  Content can only link to about:, about:blank,
about:mozilla, or about:credits

Comment 4

[Matthew Elvey]

Ok, I guess.  It would be a security violation to allow it?  URLs like
file://etc/passwd, file:///C:/Program%20Files/Gator/default.gat are allowed,
right?  Better safe than sorry?  Thanks.  Just asking for a bit more
explanation.  (Matti: no, my JS isn't disabled; I can load the URL, I just can't
click on a link to it and get there.)

Comment 5

[Matthias Versen [:Matti]]

links to file://blah are only allowed if the document with the link itself is
also laoded via file://