249812 - executables sometimes sent as "application/x-msdos-program"

Status: RESOLVED INCOMPLETE

(Webtools :: Bouncer, defect)

Description

[Daniel Wang]

security bug
Mozilla has a bug (bug 236967) that allows the user the set default action of
"application/x-msdos-program" to save-without-prompt. And the FTP sometimes sent
.exe as "application/x-msdos-program" instead of "application/octet-stream".

Note: if on the URL you see the file sent as octet-stream, clear your cache (and
maybe check your helper preferences). Reload and the file is sent as
x-msdos-program.

Comment 1

[Dave Miller [:justdave]]

Reassigning to default owner/qa on endico's open bugs so I don't have to watch
her to get mail on them.

Comment 2

[Dave Miller [:justdave]]

We have a large number of FTP servers on a round robin now...  would it be
possible to visit them directly (the direct URLs are available at
http://www.mozilla.org/mirrors.html ) and figure out which one(s) are exhibiting
this problem?

Comment 3

[Dave Miller [:justdave]]

OSL guys aren't directly handling this stuff anymore (not that they can't, but it's not their job anymore)

Comment 4

[Ed Lee :Mardak]

Just another data point..

http://mozilla.cs.utah.edu/pub/mozilla.org/firefox/releases/2.0.0.7/win32/en-US/Firefox%20Setup%202.0.0.7.exe

Comment 5

[Dave Miller [:justdave]]

I think we can get this kind of data out of sentry these days?

Comment 6

[Dave Miller [:justdave]]

OK, I have an easy way to enforce mime types in sentry now... but re-reading this bug, I'm not clear what Daniel is requesting...  The initial description of this bug appears to be a statement of fact, with no suggestion for what actually needs to be changed...

Comment 7

[Fred Wenzel [:wenzel]]

Closing re: comment 6. This hasn't turned out to be a huge problem over the recent years. If there's something we need to change, please reopen.