Local links not working in FF28?

[memeguy]

This is for local usage on my own network. I do control the server and the web apps running on it. The old CAPS directives let me do this by saying that I could trust local links coming from certain servers. It worked even in the case of redirects. It's unfortunate for me that this no longer works. I used it to track click accesses to local files on different machines. I use this feature a lot. I took a look at NoRedirect and that seems like an awfully big hammer. So basically, you're saying I'm OOL. Is that right? I guess I can build an intermediate redirect page with the real link myself, but that's more clicks I have to make. Thanks ....

Thank you! It does work now if it's a link I directly click on. However, It still fails and I get a Security Error in the Error Console if the local link is in a Location: directive from a redirected link. Am I missing something?

The code I gave Giorgio requires a click on a direct link in order to bypass the security checks. IMO allowing links that redirect to a local location to bypass security checks in the same way would be too dangerous.

ETA Oh, I guess if you can't change the server configuration, you could work around by setting up NoRedirect to block these redirects but not show a DNS error, then you would be presented with the redirect page and a direct local link which you can then click on.

[barbaz]

I took a look at NoRedirect and that seems like an awfully big hammer.

It takes regex as URL patterns so if you like, you can confine its action to only those URLs on your server which are redirects to local links, and leave the default behavior (automatically follow HTTP redirects) for everywhere else, including other pages on your local server.

So basically, you're saying I'm OOL. Is that right?

Yeah - that is, if you don't want to downgrade Fx or use NoRedirect; both of those options sound easier to me than reconfiguring an entire server...

[therube]

(Don't know if its been mentioned in this thread, but...)

"In order to respond to demands of enterprise users, the localfilelinks policy has been restored with Firefox 30. This allows users to follow links on a Web page (http:// or https://) to the local file system (file:///) especially on corporate internal applications. For the meantime, Firefox Beta or the caps-fileuri extension created by a Mozilla developer can be used to workaround this restriction.

The allowclipboard policy support is also planned to be added back with Firefox 30 because it has been used for the copy/paste buttons on some rich text editors, but will be removed anyway in the near future in favor of the standard Clipboard API's click-to-copy support. The general keyboard shortcuts, Ctrl+C and Ctrl+V, should always work."

https://developer.mozilla.org/en-US/Firefox/Releases/29/Site_Compatibility#Security

Bug 1004260 - Firefox 29 broke clipboard access; restore the CAPS allowclipboard policy until the Clipboard API allows click-to-copy

[q21]

Links to local folders are opened in Firefox' dirlisting now instead of Windows Explorer.

I'm afraid this is not a NoScript-related issue, but a change in Firefox.
If this behavior is critical to your business, drop me a PM or an email and I'll see if we can work out something.

@Giorgio Maone
Hi, I use FF 27.0.1 but have the problem with NoScript.
Links to local folders are opened in Firefox' dirlisting now instead of Windows Explorer.
I change in about:config
network.protocol-handler.expose.file = FALSE,
but when Firefox exits it deletes that setting.
When I put it in prefs.js or user.js, Firefox sets it to TRUE when starts.

Code: Select all

user_pref("network.protocol-handler.expose.file", false);
lockPref("network.protocol-handler.expose.file", false);

- nothing works.
So I would need manually set it every time I start FF.

All this doesn't happen when NoScript is switched off.
Can it be corrected, please?
Thanks.

[q21]

Ah, sorry, I found the answer - set to FALSE
noscript.fixURI

Next time you better put a warning to users when rewriting their settings.
I wasted several days sorting out all that mess.

[Thrawn]

There is already a built-in Firefox warning when you go to about:config.

[Hansl]

I'm sorry to report that this morning's update to NS 2.6.8.31 seems to have wrecked my local links again… (Using FF 30.0 on Linux)
Where can I find NS 2.6.8.29 to downgrade for the meantime?

Hans

EDIT: Found the downgrade — http://noscript.net/feed — with NS 2.6.8.29 my local links do work again.