318590 - FIrefox 1.5 bypasses zonealarm's "mobile code controls" to download PDFs, files, etc.

Status: RESOLVED INCOMPLETE

(Plugins Graveyard :: Checkpoint Zonealarm, defect)

Description

[Mark Graber]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 Firefox/1.5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 Firefox/1.5

Hi,
I have zonealarm set to disable all mobile code (OK, so I am paranoid).  Thus, ZA blocks scripts, JAVA code, embedded objects, etc.  
In Opera and the previous version 1.07 of firefox, these downloads and code is appropriately blocked.  In version 1.5, things download that should be blocked

Reproducible: Always

Steps to Reproduce:
1.Enable zonealarm code control
2.search on "fever pdf" (no quotes in google)
3.try to open a PDF

Actual Results:  
In 1.5, the PDF opens, downloads occur, etc. despite ZA being in place.  Opera and Firefox 1.0x appropriately respond to ZA and do not allow mobile code to run.

Expected Results:  
See above

See above
Not to complain.....Firefox is excellent and I have been using is since ver 0.4 or something like that!
Mark

Comment 1

[Daniel Veditz [:dveditz]]

1.5 isn't doing anything different in how it downloads this content, have you contacted ZoneAlarm? Maybe they don't recognize the new version as a browser and aren't checking its traffic?

Do they claim to block this content even on encrypted (SSL/https) connections? If so then they must be installing something into the browser itself (plugin?), and perhaps if you installed the new browser into a new directory it doesn't have whatever ZA installed.

Comment 2

[Kevin Brosnan]

Lack of response to comment 1 resolving incomplete. 

Comment 3

[timeless]

We're now tracking such bugs. This doesn't mean it's something we can fix, merely something we hope to be able to point vendors to so they can investigate. This is an automated message.

Comment 4

[Benjamin Smedberg]

Closing old bugs in the Plugins component. We aren't going to track issues in 3rd-party plugins in the Mozilla bug tracker. In addition, support for NPAPI plugins will be removed at the end of this year; for more details see the post at https://blog.mozilla.org/futurereleases/2015/10/08/npapi-plugins-in-firefox/

If there is a serious bug in Firefox, it needs to be filed in the "Core" product, "Plug-Ins" component.