Ampersands not escaped in moz-icon: URIs for ftp:, gopher:, file:, jar:, and application/http-index-format

RESOLVED FIXED

Status

()

defect
RESOLVED FIXED
10 years ago
9 years ago

People

(Reporter: sephr, Unassigned)

Tracking

(Blocks 1 bug)

Firefox Tracking Flags

(Not tracked)

Details

()

Attachments

(1 attachment)

509 bytes, application/http-index-format
Details
Reporter

Description

10 years ago
User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US-Hixie; rv:1.9.1pre) Gecko/20090628 Shiretoko/3.5pre
Build Identifier: 

Ampersands are not escaped in moz-icon: URIs for ftp:, gopher:, file:, jar:, and application/http-index-format. An XML well-formedness error will be displayed if a filename extension contains an ampersand.

Reproducible: Always

Steps to Reproduce:
1. Make a filename with an ampersand in the filename extension.
2. View the file's directory with the file: protocol.
Actual Results:  
An XML well-formedness error is displayed.

Expected Results:  
The directory is displayed.
Reporter

Comment 1

10 years ago
Posted file testcase
Status: UNCONFIRMED → NEW
Ever confirmed: true
Reporter

Comment 2

10 years ago
If you try to view the source of the testcase, a slash is appended to the URI, giving it an invalid attachment id. You have to manually prepend "view-source:" to the URI. That's a separate bug and I'm not sure it has been filed before.
just stumbled over this issue in Firefox-3.6
minimum filename that triggers this bug is ".&" 
and I can confirm that it happens in real-world scenarios.
Blocks: 599904
Reporter

Comment 4

9 years ago
This appears to have been fixed in Firefox 4.0, though I can't find the bug it was fixed in.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.