[FIXED] ABE blocking requests from chrome:// URLs

Discussions about the Application Boundaries Enforcer (ABE) module
Guest

[FIXED] ABE blocking requests from chrome:// URLs

Post by Guest »

A small oddity I noticed: When I type out the URL of a site I have ABE rules for, ABE will block the page load if it responds with a redirect. Curiously, it lists "browser.xul" as the originating page. Example:

Code: Select all

[ABE] <.bplaced.net> Deny on {GET http://www.bplaced.net/ <<< http://bplaced.net/, chrome://browser/content/browser.xul, chrome://browser/content/browser.xul - 6}
USER rule:
Site .bplaced.net
Accept from SELF++
Deny
As you can see, the redirect shouldn't be blocked because the base domain is the same. bplaced.net is just an example for sites that redirect http://domain/ to http://www.domain/. The same thing happens on sites that redirect http://www.* to the plain domain name.
Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.3) Gecko/20100401 Firefox/3.6
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE blocking requests from chrome:// URLs

Post by Giorgio Maone »

Guest wrote:Curiously, it lists "browser.xul" as the originating page.
Yes, that's the origin for any load happening from the location bar.
However it shouldn't impact on origin chain decisions, so this is a bug, thanks for reporting.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE blocking requests from chrome:// URLs

Post by Giorgio Maone »

Should be fixed in latest development build
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.4) Gecko/20100611 Firefox/3.6.4
Post Reply