Closed Bug 501066 Opened 13 years ago Closed 11 years ago

Ampersands not escaped in moz-icon: URIs for ftp:, gopher:, file:, jar:, and application/http-index-format

Categories

(Core :: Networking: File, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: sephr, Unassigned)

References

(Blocks 1 open bug, )

Details

Attachments

(1 file)

509 bytes, application/http-index-format
Details
User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US-Hixie; rv:1.9.1pre) Gecko/20090628 Shiretoko/3.5pre
Build Identifier: 

Ampersands are not escaped in moz-icon: URIs for ftp:, gopher:, file:, jar:, and application/http-index-format. An XML well-formedness error will be displayed if a filename extension contains an ampersand.

Reproducible: Always

Steps to Reproduce:
1. Make a filename with an ampersand in the filename extension.
2. View the file's directory with the file: protocol.
Actual Results:  
An XML well-formedness error is displayed.

Expected Results:  
The directory is displayed.
Attached file testcase
Status: UNCONFIRMED → NEW
Ever confirmed: true
If you try to view the source of the testcase, a slash is appended to the URI, giving it an invalid attachment id. You have to manually prepend "view-source:" to the URI. That's a separate bug and I'm not sure it has been filed before.
just stumbled over this issue in Firefox-3.6
minimum filename that triggers this bug is ".&" 
and I can confirm that it happens in real-world scenarios.
Blocks: 599904
This appears to have been fixed in Firefox 4.0, though I can't find the bug it was fixed in.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.