298135 - Unable to disable access to local directories via file:// URL in address bar

Status: VERIFIED DUPLICATE of bug 159135

(Core :: Networking: File, enhancement)

Description

[Jon Stanley]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

When used in a cybercafe environment, it is advantageous to be able to disable
the file:// protocol handler (particularly when entered in the address bar) to
disallow access to the local filesystem.

Access is already disabled in IE, via the local security policy.  It seems that
Mozilla does not respect this, and allows access to any file which the user is
allowed access to via NTFS file permissions (since this user is a local admin,
it allows access to the entire system).

I cannot disable the address bar, as that is how the users can go to various
websites.

Reproducible: Always

Steps to Reproduce:
Enter file:///c/ in address bar.
Actual Results:  
The directory displayed.

Expected Results:  
Disable this behavior.

Comment 1

[Matthias Versen [:Matti]]

*** This bug has been marked as a duplicate of 159135 ***

Comment 2

[benc]

V/dupe.

or maybe a depends, if you ever make that into a feature want want it tested.