902415 - Bring back option if Firefox should be run after setup

Status: RESOLVED WONTFIX

(Firefox :: Installer, defect, P3)

Description

[John Schimanski]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0 (Beta/Release)
Build ID: 20130730113002

Steps to reproduce:

1. Upgraded Firefox by doing full exe install under an Administrator account. I only browser under non-administrator accounts.

2. Firefox 23 removed the option allowing the user to decide if the installer should run Firefox.



Actual results:

Mozilla WITHOUT ASKING launches the browser under after installation under an Administrator account AND WITHOUT PERMISSION OPENS AN NON-HTTPS WEB PAGE still under the administrator account. This creates a potential attack vector.


Expected results:

There must be an option (which used to be there in Firefox 1-22) allowing the user to DECIDE if the browser is to be auto-launched after install.

I didn't verify whether the browser even has administrator privileges! This is possible because installers have admin rights and executables launched by it inherit the rights.

Comment 1

[Robert Strong (they/them - no direct email)]

Stephen, this was discussed during the original UX design and it was decided that this didn't affect that many users especially with the ability to prompt for different credentials when UAC is turned on and that we launch in the non-elavated context prior to UAC. Is this still wontfix?

Comment 2

[John Schimanski]

Is a security issue WONTFIX because it doesn't "affect that many users"?? Are you kidding?

Comment 3

[John Schimanski]

The idiot who removed the option should never be allowed to work on Firefox again.

Comment 4

[Loic]

(In reply to John Schimanski from comment #3)
> The idiot who removed the option should never be allowed to work on Firefox
> again.

Please, keep your insulting comments to yourself. Being frustrated by the removal of an option you believe important is understandable, but post your opinion by respecting the BMO etiquette.
https://bugzilla.mozilla.org/page.cgi?id=etiquette.html

Comment 5

[Wayne Mery (:wsmwk)]

rstrong, do you still need shorlander's feedback?

Comment 6

[Robert Strong (they/them - no direct email)]

(In reply to Wayne Mery (:wsmwk, use Needinfo for questions) from comment #5)
> rstrong, do you still need shorlander's feedback?
Preferably shorlander since he understands this UI including the constraints though I can walk through the constraints with another Firefox UX person.

Comment 7

[Stephen Horlander [:shorlander]]

Are we talking about the Stub installer or the regular installer? Or both?

Comment 8

[Robert Strong (they/them - no direct email)]

The stub installer only. When all options are displayed on the Options page there is no longer any room so either everything will need to be re-positioned or one of the options will need to be removed if it were added to it.

Comment 9

[Molly Howell (she/her) (no longer active)]

The UX design around the install and onboarding process has changed substantially since this bug was filed, and having this checkbox in the stub installer no longer really makes sense.

There is no security issue here because we never start the browser with administrator privileges, whether the installer has them or not.