Firefox blocks local links

recently a website handgestrickt uses frequently, blocked some contents. an analysis showed, that the website was referencing local content on the harddisc. the M$ Internet Exploiter, well known as the biggest security hole in the universe, allows these references, Firefox and Opera do not. another reason why we use Firefox here!

the risks are clear. some people could start programs on your computer, reference local content into a frame, then use JavaScript to read the content and send it over a webform. bad people have a lot of bad ideas how to exploit this.

the new releases of Firefox allow a per-website-policy to allow some websites access to your local files. all you have to do is add the following to your user.js in your profile folder:

user_pref("capability.policy.policynames", "localfilelinks");

user_pref("capability.policy.localfilelinks.sites",
"http://www.example.com");

user_pref("capability.policy.localfilelinks.checkloaduri.enabled",
"allAccess");

you can also add several websites by separating with whitespaces:

user_pref("capability.policy.localfilelinks.sites",
"http://www.example.com http://www.example.net");

related:
mozillazine: Links to local pages don't work
mozillazine: User.js file
mozillazine: Profile folder
Confluence: Linking to local file under Firefox

Tuesday, 22. August 2006 • trackback url

Re: Firefox blocks local links

Doesn\\\'t work for me.
In my error console I get ...

Security Error: Content at xxx may not load or link to file://xxx

Reply

Monday, 19. March 2007 • FireFox User • • • Reply

trackback url

Add Comment

( to reply to a comment, click the reply link next to the comment )

Comment Title:
Your Name:
Email Address:
Make Public?
Website:
Make Public?

Comment:


Allowed XHTML tags : a, b, i, strong, code, acrynom, blockquote, abbr. Linebreaks will be converted automatically.


Captcha:

captcha image

Soundfile:


please type the content of the above image or the soundfile into the following form-field: