Closed Bug 501066 Opened 13 years ago Closed 11 years ago
Ampersands not escaped in moz-icon: URIs for ftp:, gopher:, file:, jar:, and application/http-index-format
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US-Hixie; rv:1.9.1pre) Gecko/20090628 Shiretoko/3.5pre Build Identifier: Ampersands are not escaped in moz-icon: URIs for ftp:, gopher:, file:, jar:, and application/http-index-format. An XML well-formedness error will be displayed if a filename extension contains an ampersand. Reproducible: Always Steps to Reproduce: 1. Make a filename with an ampersand in the filename extension. 2. View the file's directory with the file: protocol. Actual Results: An XML well-formedness error is displayed. Expected Results: The directory is displayed.
Status: UNCONFIRMED → NEW
Ever confirmed: true
If you try to view the source of the testcase, a slash is appended to the URI, giving it an invalid attachment id. You have to manually prepend "view-source:" to the URI. That's a separate bug and I'm not sure it has been filed before.
just stumbled over this issue in Firefox-3.6 minimum filename that triggers this bug is ".&" and I can confirm that it happens in real-world scenarios.
This appears to have been fixed in Firefox 4.0, though I can't find the bug it was fixed in.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.