445120 - Provide option to disable obeying to windows security zone settings, affects file downloading

Status: VERIFIED DUPLICATE of bug 445158

(Toolkit :: Downloads API, defect)

Description

[[:nickname]]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1

Before FF3 I had the following:
* In Windows "Internet zone" security settings, the download of files was prohibited
* I added exception into the "Trusted zone" settings to Windows Update did work
* FF2 (and prior) was not affected by this settings, I could download every file I wanted

This way my system was locked against unwanted file downloads but FF2 could "escape" this setting. Which, in my case, was what I expected.

Now, with FF3:
* I cannot download any files anymore, because FF3 respects the Windows settings
* I use this setting only so IE doesn't pose a threat to my system. Including all application taking advantage of IE, too (Steam, etc.)

Now to have downloads working from everywhere in FF3, I've to relax the security settings for my *complete system*.

I see this as:
* bad for my environment, security-wise
* an unexpected backwards compatibility break

Take for example, I wouldn't expect wget either to suddenly respect the OS settings, this would make the tool unusable. I see it that way with FF3. I trust FF3 to a certain degree, but I don't trust IE.

Reproducible: Always

Comment 1

[Shawn Wilsher :sdwilsh]

This was a deliberate and conscious change on our part to obey the system settings.

Comment 2

[[:nickname]]

No way to get an option in (about:config?) to disable this backwards compatibility break?

thanks

Comment 3

[Robert Longson [:longsonr]]

That wouldn't give parents much peace of mind if their kids could get around the security restrictions they had put in place for them by doing that would it?

Comment 4

[Shawn Wilsher :sdwilsh]

or IT administrators who lock down their network with these settings.

Comment 6

[Stephen Donner [:stephend] Not actively reading bugmail]

Verified dup (forward-duping because bug 445158 has more info at this point).