Closed Bug 258601 Opened 20 years ago Closed 20 years ago

downloading a long file name will not display the full file name

Categories

(Toolkit :: Downloads API, defect)

defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: regatta, Assigned: dveditz)

Details

(Keywords: fixed-aviary1.0.1, Whiteboard: [sg:spoof] [ignore comments 6-11])

Attachments

(1 file, 1 obsolete file)

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7) Gecko/20040803 Firefox/0.9.3 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7) Gecko/20040803 Firefox/0.9.3 if someone try to download the file (for example): part_4jpg .exe mozilla/firefox will not display ".exe", this is what happend to me Reproducible: Always Steps to Reproduce: 1. 2. 3.
-> firefox. the ui code is different.
Assignee: download-manager → bugs
Product: Browser → Firefox
QA Contact: bmo
I can confirm this for firefox. The download dialog *does* say the file is an "Application" for an .exe file where it would normally give the type. This still could be used to spoof people ("foo.jpg <spaces> .exe") but even then we wouldn't automatically launch the file and would bring up the "executable" warnings if the user tried to launch it. Clearing security flag. Filenames with spaces is not a new idea and the sort of people who think of that kind of thing wouldn't need to be inspired by a bugzilla reports to try it out in our products. Openness might inspire more thinking about possible UI improvements.
Group: security
Status: UNCONFIRMED → NEW
Ever confirmed: true
Whiteboard: [sg:spoof]
A variation on this can be seen in the Preview release. If a link like this one (below) for autodownloading is triggered: http://www.mybittorrent.com/resources/hash/download.php?id=2180&name=The%20Wonder%20Years%20Season%201.torrent The resulting filename is truncated in interesting ways. On one machine, the file name is truncated at the first space, and the extension is appended. Thus, a filename of "The Way It Was.torrent" becomes "the.torrent". On another machine (which I will post examples from later this evening), the extension is left off as well. In this case, the resulting filename would be "The" -- not very helpful. NOTE: Mozilla 1.5 is on the second machine mentioned above as well. It works fine, as does Moz 1.7.3 from another machine. (Attachments to come -- examples of the screens)
This was downloaded on a Win2K machine with Mozilla 1.5 originally installed, Firefox added. The resulting file has no extension
It appears that the download manager truncates filenames after the 53rd character. This would seem to be more of a annoyance then anything and will not affect most users. It is late at night and the only way I can think to exploit this would be to spoof a different file extension, but since the file is saved with the spoofed extension, some user intervention would be required to allow a successful attack.
I wish to add another manifestation of this bug: it also truncates the file name after "_" (underscore). I.E. a file name like "name_2004_12_01_description.doc" is saved as "name" This is very annoing when saving dated and versions of files... This is my first post in Buglist. I am sorry for any greenhornish comments in advance ;)
test case
Experienced this on NT4 and XP SP1 machines: Save As ... truncates file names after the first space encountered in the name in Firefox 0.8 and 1.0. Does not truncate in older versions of Mozilla and Phoenix. IE 5.5 and 6.0 also do not truncate. Our workload involves a lot of file downloading with long names that need to be preserved, so people start to gravitate toward IE6.
(In reply to comment #8) > Experienced this on NT4 and XP SP1 machines: > Save As ... truncates file names after the first space encountered in the name > in Firefox 0.8 and 1.0. kobi@suespammers.org: The bug that you are seeing is bug 221028, not this one. It is caused by the server sending invalid Content-disposition headers.
This happens on Windows XP SP2 as well. When downloading a file with spaces in the name, the first word before the space is saved as an application (exe), but not the file type of the original file. (Ex: If you were to download 'The Best Movie.avi', you would instead recieve 'The.exe'.)
Running XP Pro SP2, Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0. Filenames containing spaces or underscores get truncated to first word and no extension thus files downloaded lose association. no problem with files that have a continuous name and extension, i.e. filename.ext.
Comments 6-11 have nothing to do with this bug report (see comment 0). Comment 9 is right for the reason for the truncation. The problem is on Yahoo's side, see tech evang bug 252309 (it appears to truncates also underscores, but that is only a display issue because Yahoo shows spaces in attachment names as underscores).
Whiteboard: [sg:spoof] → [sg:spoof] [ignore comments 6-11]
Attachment #164273 - Attachment is obsolete: true
Assignee: bugs → dveditz
I have also seen this problem multiple times. It truncates file names after undescore or space. In my case it also forgets the file type. Same file with IE downloads well.
This was fixed along with bug 275417
Status: NEW → RESOLVED
Closed: 20 years ago
Resolution: --- → FIXED
Product: Firefox → Toolkit
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: