Closed Bug 81127 Opened 23 years ago Closed 16 years ago

"What's Related" Should not send chrome urls

Categories

(Core :: Networking, defect)

Product:
Core
Component:
Networking
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 50594

People

(Reporter: bugzilla, Unassigned)

References

Details

Alexa has requested that we stop sending all of the chrome:// urls to their 
servers.
so has users in general.. bug 53239
This is just for chrome:// (e.g. UI) urls that shouldn't be sent anyways, not 
all urls.
we shouldn't send urls if their protocol is:
resource file about javascript data, or view-source. do we?

Actually, that's a long list.  Let's only send information for the few 
protocols alexa actually recognizes.  Unfortunately alexa's site isn't usable.
OS: Windows 2000 → All
Hardware: PC → All
Target Milestone: --- → mozilla1.0
Status: NEW → ASSIGNED
usability/polish, 0.9.4.
Target Milestone: mozilla1.0 → mozilla0.9.4
Target Milestone: mozilla0.9.4 → mozilla0.9.5
Mass moving lower-priority bugs to 0.9.6 (with Blake's pre-consent) to make room
for remaining 0.9.4/eMojo bugs and MachV planning, performance and feature work.
 If anyone disagrees with the new target, please let me know.
Target Milestone: mozilla0.9.5 → mozilla0.9.6
Target Milestone: mozilla0.9.6 → mozilla1.0
Dup of bug 57675?
Target Milestone: mozilla1.0 → Future
-> default owner
Assignee: blaker → sgehani
Status: ASSIGNED → NEW
Keywords: mozilla1.0
(asa asked me to look into this today...)

-> networking... possibly security.

Darin, isn't there a service whitelist we use for other URL forwarding
mechanisms (like Referer:?)
Component: Sidebar → Networking
Target Milestone: Future → ---
Probably the problem relates somewhat to comments in:

http://bugzilla.mozilla.org/show_bug.cgi?id=57675#c5
Assignee: sgehani → darin
QA Contact: sujay → benc
Summary: Should not send chrome urls for What's Related → "What's Related" Should not send chrome urls
Assignee: darin → nobody
QA Contact: benc → networking
Depends on: 468337
Fixdd by Bug 50594 changes the code to only allow "http://" urls.
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.