User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4 When used in a cybercafe environment, it is advantageous to be able to disable the file:// protocol handler (particularly when entered in the address bar) to disallow access to the local filesystem. Access is already disabled in IE, via the local security policy. It seems that Mozilla does not respect this, and allows access to any file which the user is allowed access to via NTFS file permissions (since this user is a local admin, it allows access to the entire system). I cannot disable the address bar, as that is how the users can go to various websites. Reproducible: Always Steps to Reproduce: Enter file:///c/ in address bar. Actual Results: The directory displayed. Expected Results: Disable this behavior.
*** This bug has been marked as a duplicate of 159135 ***
V/dupe. or maybe a depends, if you ever make that into a feature want want it tested.