If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

Automatic download of infected EXE file

RESOLVED DUPLICATE of bug 232564

Status

()

Toolkit
Downloads API
RESOLVED DUPLICATE of bug 232564
13 years ago
4 years ago

People

(Reporter: Ken Cooper, Assigned: Ben Goodger (use ben at mozilla dot org for email))

Tracking

1.7 Branch
x86
Windows XP
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Reporter)

Description

13 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041109 Firefox/1.0 (MOOX M3)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041109 Firefox/1.0 (MOOX M3)

While visiting the aforementioned URL, a download automatically starts without
user prompting.

Reproducible: Always

Steps to Reproduce:
1. Visit the site.
2.
3.

Actual Results:  
The file 'default.exe' trys to download automatically.

Expected Results:  
Prohibited any download without user prompting.

Comment 1

13 years ago
More information can be found in the thread that prompted this bugzilla entry:

http://forums.mozillazine.org/viewtopic.php?t=205948

From that thread, my proposed resolution:

"Seems to me that Firefox shouldn't pre-download files when the download is
started automatically by viewing the page. There should have to be some form of
user action before a download starts. In other words, if I click a download
link, pre-downloading is fine. If I visit a page that starts a download
automatically, it should not actually start downloading until I've OKed it."
this is a wontfix. The download is stored in the temp directory (hidden under
windows9 under a random name and it's deleted if you close FF.

There is no security risk...
Status: NEW → RESOLVED
Last Resolved: 13 years ago
Resolution: --- → WONTFIX
no security risk but other isues
Status: RESOLVED → REOPENED
Resolution: WONTFIX → ---

*** This bug has been marked as a duplicate of 129923 ***
Status: REOPENED → RESOLVED
Last Resolved: 13 years ago13 years ago
Resolution: --- → DUPLICATE
(Reporter)

Comment 5

13 years ago
(In reply to comment #2)
> this is a wontfix. The download is stored in the temp directory (hidden under
> windows9 under a random name and it's deleted if you close FF.
> 
> There is no security risk...

I did not submit this bug as a security risk.

This is an annoyance and one that does put an fx user at a personal risk. I
would come to expect more from this browser. Popups are also an annoyance and
not a risk, but they do not put an end user at risk. Sorry to hear you feel this
is not worth fixing.
Status: RESOLVED → REOPENED
Resolution: DUPLICATE → ---

Comment 6

13 years ago
(In reply to comment #2)
> this is a wontfix. The download is stored in the temp directory (hidden under
> windows9 under a random name and it's deleted if you close FF.

This is a Firefox autodownload issue, file is not deleted when  you close Firefox.

This is a duplicate, but not of the bug it was already duped to.
Whiteboard: DUPEME

Comment 8

13 years ago
see bug 55307 and bug 69938, so if the dialog prompts the file download is
already running
Version: unspecified → 1.0 Branch
It is indeed a dup, though its alter ego may not yet realize that it will be expected to not only warn, but not start downloading while the warning is up.

*** This bug has been marked as a duplicate of 232564 ***
Status: REOPENED → RESOLVED
Last Resolved: 13 years ago12 years ago
Resolution: --- → DUPLICATE
Product: Firefox → Toolkit

Updated

4 years ago
Whiteboard: DUPEME
You need to log in before you can comment on or make changes to this bug.