Closed Bug 501066 Opened 16 years ago Closed 14 years ago

Ampersands not escaped in moz-icon: URIs for ftp:, gopher:, file:, jar:, and application/http-index-format

Categories

(Core :: Networking: File, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: sephr, Unassigned)

References

(Blocks 1 open bug, )

Details

Attachments

(1 file)

509 bytes, application/http-index-format
Details
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US-Hixie; rv:1.9.1pre) Gecko/20090628 Shiretoko/3.5pre Build Identifier: Ampersands are not escaped in moz-icon: URIs for ftp:, gopher:, file:, jar:, and application/http-index-format. An XML well-formedness error will be displayed if a filename extension contains an ampersand. Reproducible: Always Steps to Reproduce: 1. Make a filename with an ampersand in the filename extension. 2. View the file's directory with the file: protocol. Actual Results: An XML well-formedness error is displayed. Expected Results: The directory is displayed.
Attached file testcase
Status: UNCONFIRMED → NEW
Ever confirmed: true
If you try to view the source of the testcase, a slash is appended to the URI, giving it an invalid attachment id. You have to manually prepend "view-source:" to the URI. That's a separate bug and I'm not sure it has been filed before.
just stumbled over this issue in Firefox-3.6 minimum filename that triggers this bug is ".&" and I can confirm that it happens in real-world scenarios.
Blocks: 599904
This appears to have been fixed in Firefox 4.0, though I can't find the bug it was fixed in.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: