If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

Unable to disable access to local directories via file:// URL in address bar

VERIFIED DUPLICATE of bug 159135

Status

()

Core
Networking: File
--
enhancement
VERIFIED DUPLICATE of bug 159135
13 years ago
12 years ago

People

(Reporter: Jon Stanley, Assigned: Darin Fisher)

Tracking

Trunk
x86
Windows XP
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

13 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

When used in a cybercafe environment, it is advantageous to be able to disable
the file:// protocol handler (particularly when entered in the address bar) to
disallow access to the local filesystem.

Access is already disabled in IE, via the local security policy.  It seems that
Mozilla does not respect this, and allows access to any file which the user is
allowed access to via NTFS file permissions (since this user is a local admin,
it allows access to the entire system).

I cannot disable the address bar, as that is how the users can go to various
websites.

Reproducible: Always

Steps to Reproduce:
Enter file:///c/ in address bar.
Actual Results:  
The directory displayed.

Expected Results:  
Disable this behavior.

*** This bug has been marked as a duplicate of 159135 ***
Status: UNCONFIRMED → RESOLVED
Last Resolved: 13 years ago
Resolution: --- → DUPLICATE

Comment 2

12 years ago
V/dupe.

or maybe a depends, if you ever make that into a feature want want it tested.
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.