284282 - Firefox silently downloads iframe src files. Even executable files !!

Status: VERIFIED DUPLICATE of bug 266325

(Toolkit :: Downloads API, defect)

Description

[Juan Rey]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050227 Firefox/1.0+
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050227 Firefox/1.0+

When Firefox finds in a HTML document an iframe tag  with a file source
automatically downloads it, it does not mind what file type it is, even an
executable one. 

Try this:
<iframe height="0" width="0"
src="ftp://ftp.rediris.es/mirror/simtelnet/win95/filemngr/tcmdr651.exe"></iframe>

Reproducible: Always

Comment 1

[OstGote!]

Seems not to be a bug, see Bug 266325.

Comment 2

[Juan Rey]

(In reply to comment #1)
> Seems not to be a bug, see Bug 266325.

I do not think so. An unsolicited executable (.exe) under windows ia always a
risk and such file could be too big for a dialup connection.

Anyway about iframe source files, shouldn't them be filterred by filetype (
extension or magic number ) ? shouldn't them be filterred by filesize ( maximun
filesize configuration option ) ?

Comment 3

[Frank Wein [:mcsmurf]]

*** This bug has been marked as a duplicate of 266325 ***

Comment 4

[Juan Rey]

(In reply to comment #3)
> 
> *** This bug has been marked as a duplicate of 266325 ***

That bug is INVALID, since it describes a diferent, old, behavior I think that
this one, 284282, must not be resolved as duplicated.

Comment 5

[Mike Connor [:mconnor]]

This is a dupe, do not reopen this bug a second time.  Please read
https://bugzilla.mozilla.org/etiquette.html before commenting further.

*** This bug has been marked as a duplicate of 266325 ***

Comment 6

[Juan Rey]

(In reply to comment #5)
> This is a dupe, do not reopen this bug a second time.  Please read
> https://bugzilla.mozilla.org/etiquette.html before commenting further.
> 
> *** This bug has been marked as a duplicate of 266325 ***

Maybe, but I don not know if you really noticed the different behavior between
old bug, INVALID, and this one and if you have pondered it or you just marked it
again as duplicated without paying any attention.

I am sorry about bordering but surprisingly I have not had any feedback from you
from my feedback, I did, to you. So I would appreciate you to discuss things or
at least explaining your reasons and showing me you understand my comments.

Please reply this post !!!

Comment 7

[Juan Rey]

knock, knock !!


Thank you for "your acknowledgment" !!!

Comment 8

[Patrick]

(In reply to comment #7)
> knock, knock !!
> 
> 
> Thank you for "your acknowledgment" !!!

As stated in comment 5, please read the "rules" of conduct:

"2  No obligation. 
"Open Source" is not the same as "the developers must do my bidding." The only
person who has any obligation to fix the bugs you want fixed is you. Never act
as if you expect someone to fix a bug by a particular date or release. This is
merely obnoxious, and is likely to get the bug ignored."

Comment 9

[Juan Rey]

(In reply to comment #8)
> (In reply to comment #7)
> > knock, knock !!
> > 
> > 
> > Thank you for "your acknowledgment" !!!
> 
> As stated in comment 5, please read the "rules" of conduct:
> 
> "2  No obligation. 
> "Open Source" is not the same as "the developers must do my bidding." The only
> person who has any obligation to fix the bugs you want fixed is you. Never act
> as if you expect someone to fix a bug by a particular date or release. This is
> merely obnoxious, and is likely to get the bug ignored."
> 

First of all, I just wanted you to show me any kind of manners, instead of
ignoring me. I do not want specifically you to do something.

However this is, or is not, a bug with out dependence on who is going to solve
it, even if no body would like to work on it.

Developers must NOT do my bidding. But as a user in this project (developer in
other projects) I do not feel my self as an inferior being who should not be pay
attention to. We are on the same team, treat me as a person.

Anyway, I could not understand how this bug was ignored, comparing it with bug
279945

Comment 10

[Patrick]

You ask for a response on April 1. With a weekend in between, don't start
sending reminders already on April 4. That comes across as obnoxious and will be
ignored. The same goes for reopening bugs, shouting, and exlamation marks and
talking about "inferior beings" and not "being treated as a person".

Your blocking request was something altogether differenent and handled by
someone else. Furthermore, i assume "you" is used transferrably, as you, Juan,
never asked me, Patrick, anything.

End of non-bug related discussion.

Comment 11

[Juan Rey]

(In reply to comment #10)
> You ask for a response on April 1. With a weekend in between, don't start
> sending reminders already on April 4. 

Mike Connor took a time to change this bug resolution but not for arguing about
it, as I asked him 20 minutes later. Frank Wien never replied my post,
2005-09-03, in bug 266325 so I was afraid it is happening again.

> That comes across as obnoxious and will be
> ignored. The same goes for reopening bugs, shouting, and exlamation marks and
> talking about "inferior beings" and not "being treated as a person".
>

I am very sorry about my unproper manners bat it was the only way to get your
attention for a bug I am concerned about.

> Your blocking request was something altogether differenent and handled by
> someone else. Furthermore, i assume "you" is used transferrably, as you, Juan,
> never asked me, Patrick, anything.
> 

"YOU", bugzilla administrators

> End of non-bug related discussion.

I wanted a bug related discussion but I could not get it. Excuse me if only got
you angry instead of talk about this bug.

Comment 12

[timeless]

for the record, none of the people who touched this bug are bugzilla
administrators, and bugzilla administrators have little to do with the everyday
management of individual bugs. now, mconnor is a firefox peer, and dveditz is a
mozilla.org driver, so they are well within their right to take the actions they
took.