Closed
Bug 662206
Opened 15 years ago
Closed 13 years ago
Don't search when the typed string starts with a known protocol (but is an invalid URL)
Categories
(Firefox :: Address Bar, defect)
Tracking
()
RESOLVED
WONTFIX
People
(Reporter: jruderman, Unassigned)
References
Details
(Keywords: sec-low, Whiteboard: [sg:low])
Suppose cPanel generated the password "passw#rd" for me.
1. Type into the address bar:
ftp://user:passw#rd@host/
Result:
Firefox does a Google search for "ftp://user:passw#rd@host/". Sending my FTP password to a search engine isn't a nice thing to do.
Expected:
Tell me "Invalid URL" (or escape the "#" for me?). It should be clear from the "ftp:" part that I don't intend to search, and the search is unlikely to be useful.
Background:
Some password generators create passwords with "#", not expecting that users will try to create URLs containing the password. It's less obvious that "#" needs to be escaped than "/" (see bug 454241). This problem was pointed out by avih.
Comment 2•13 years ago
|
||
We actually want to go the other direction for the most part - searching is by far the more common desire. Entering passwords in the URL bar is rather rare (particularly passwords with "special" characters), so the complication of trying to fix this isn't worth the cost.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → WONTFIX
You need to log in
before you can comment on or make changes to this bug.
Description
•