Closed Bug 662206 Opened 15 years ago Closed 13 years ago

Don't search when the typed string starts with a known protocol (but is an invalid URL)

Categories

(Firefox :: Address Bar, defect)

x86_64
macOS
defect
Not set
normal

Tracking

()

RESOLVED WONTFIX

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: sec-low, Whiteboard: [sg:low])

Suppose cPanel generated the password "passw#rd" for me. 1. Type into the address bar: ftp://user:passw#rd@host/ Result: Firefox does a Google search for "ftp://user:passw#rd@host/". Sending my FTP password to a search engine isn't a nice thing to do. Expected: Tell me "Invalid URL" (or escape the "#" for me?). It should be clear from the "ftp:" part that I don't intend to search, and the search is unlikely to be useful. Background: Some password generators create passwords with "#", not expecting that users will try to create URLs containing the password. It's less obvious that "#" needs to be escaped than "/" (see bug 454241). This problem was pointed out by avih.
We actually want to go the other direction for the most part - searching is by far the more common desire. Entering passwords in the URL bar is rather rare (particularly passwords with "special" characters), so the complication of trying to fix this isn't worth the cost.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.