Closed Bug 295504 Opened 19 years ago Closed 19 years ago

NPN_GetURL returns Generic Error when redirecting from http protocol to file protocol

Categories

(Core Graveyard :: Plug-ins, defect)

x86
Windows XP
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 122022

People

(Reporter: dkolas, Unassigned)

Details

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

When the plugin is invoked by loading a webpage on the http protocol, a call to
NPN_GetURL returns 1 when the target URL's protocol is file.  From http to http
works, from http to ftp, mailto, about all work.  Redirecting from file to file
also works.  

Reproducible: Always

Steps to Reproduce:
1. Modify sample npbasic to call NPN_GetURL from DestroyStream and disabling its
other output
2. invoke plugin from file on http
3. observe blank screen

Actual Results:  
Leaves the content area of the browser white if you go to the page from another
page, or leaves the area gray if new tab or new window.

Expected Results:  
redirected to the file
It was working with Netscape 4x and 6x and Phonix, and don't know why not 
working for FireFox now. I am waiting for your fix as well.
Do we end up blocking this with a security check or something?
We added a checkLoadURI call to fix
http://www.mozilla.org/security/announce/mfsa2005-27.html

This is the same restriction on loading local file urls from http that web
browser content faces (and the current workaround: set the security:checkloaduri
pref to false).

There are, of course, vehement arguments against this policy, but whatever
policy is in effect plugin content shouldn't be able to bypass it.

This is effectively a dupe of the web content bug 84128 and bug 122022

*** This bug has been marked as a duplicate of 122022 ***
Status: UNCONFIRMED → RESOLVED
Closed: 19 years ago
Resolution: --- → DUPLICATE
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.