Closed Bug 274188 Opened 20 years ago Closed 20 years ago

file:// url in http pages does not load content

Categories

(Firefox :: File Handling, defect)

x86
Linux
defect
Not set
normal

Tracking

()

VERIFIED INVALID

People

(Reporter: covex, Assigned: bugs)

References

()

Details

Attachments

(2 files)

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040618
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040618

If html page from http:// (e.g.
http://bbs.cvut.cz/~covex/czilla/REDDRAGON2.html)  has img src=url pointing to
file:// (e.g. 
<img src="file:///home/test/temp/REDDRAGON2_soubory/rd_b01.jpg") then the image
is not displayed in FF1.0. This works in MAS1.7 however.

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Actual Results:  
FF displays nothing instead of picture.

Expected Results:  
Picture should be displayed.

This behaviour is not happening if page is on local disk. Means if you store
exacly same page from above url to local disk and load as
file:///home/test/temp/REDDRAGON2.html then also urls with img src=file:// seems
to work ok.

This seems similar to bug #122022, but is was said to be a dup of #84128, which
are different problems.
This problem is also mentioned in bug #227546, but this bug is also about
different thing.
Attached image Result in FF1.0
Attached image Result in MAS1.7
What you are seeing is the result of bug 69070, and is by design: pages from
http: may not link to or load images from file: (which is the message you get in
the JS Console). You would see the same result in 1.8a5.

In trunk nightlies, you can enable it per-domain, see
http://www.mozilla.org/projects/security/components/ConfigPolicy.html but not
apparently on the 1.0 branch. Other than that, your "Expected Result" of loading
<img src="file:..."> in a page from http: is a security hole, so INVALID.
Status: UNCONFIRMED → RESOLVED
Closed: 20 years ago
Resolution: --- → INVALID
Status: RESOLVED → VERIFIED
Hm.. some pages use this "feature" to speed up the page loading - especialy the
game server store lot of graphics localy, then html is pointing to local files.
If that is possible to enable by policy, then it'll great.

Thanx for prompt response.
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: