345266 - about:config link in email message does nothing

Status: NEW

(SeaMonkey :: MailNews: Message Display, defect)

Description

[Nelson Bolyard (seldom reads bugmail)]

I'm running 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060701 SeaMonkey/1.5a

If I type about:config  into the browser address bar and press enter,
it has the expected effect of bringing up the config page.

If I receive an email message or read a usenet news message that contains
the string about:config that string appears underlined, just like alink
would, and about:config shows in the mailnews status bar, as one might 
expect for a link.  

But clicking the about:config link inthat mail message does nothing.
It does not:
- cause a SM navigator window to open
- cause a new tag to appear
- cause the content of any existing nav tab to be replaced with the 
  config page.

Seems to be consensus among folks in mozilla.support.seamonkey that this 
is a bug and a regression.  If I have filed this bug against the wrong 
component, please feel free to correct it.

Comment 1

[:Gavin Sharp [email: [e-mail]]]

"content" (the email message) linking to "chrome" (about:config) was disabled because of security issues (due to privilege escalation issues). I forget in which bug this happened exactly, a narrow regression range would probably help.

Comment 2

[Nelson Bolyard (seldom reads bugmail)]

*** Bug 345573 has been marked as a duplicate of this bug. ***

Comment 3

[Tony Mechelynck [:tonymec]]

The Thunderbird equivalent of this SeaMonkey bug is bug 525215. Dupe them together (see bug 525215 comment #6) and move to MailNews Core? Or even to Core (and possibly WONTFIX) if <a href="about:config">All Preferences</a> doesn't do anything either in a webpage in the (SeaMonkey or Firefox) browser? Neil, what do you think?

Comment 4

[[e-mail]]

(In reply to Tony Mechelynck from comment #3)
> The Thunderbird equivalent of this SeaMonkey bug is bug 525215. Dupe them
> together (see bug 525215 comment #6) and move to MailNews Core? Or even to
> Core (and possibly WONTFIX) if <a href="about:config">All Preferences</a>
> doesn't do anything either in a webpage in the (SeaMonkey or Firefox)
> browser? Neil, what do you think?

I know most about: pages are off limits for linking from web pages, and I think we would probably want to use the same rules for messages, although I don't know offhand where the security check is performed.