This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.

Bug 26877 - Reportedly Firefox cannot match the whitelist approach for registerProtocolHandler(). See https://bugzilla.mozilla.org/show_bug.cgi?id=1056860#c6 for more information.
Summary: Reportedly Firefox cannot match the whitelist approach for registerProtocolHa...
Status: RESOLVED WORKSFORME
Alias: None
Product: WHATWG
Classification: Unclassified
Component: HTML (show other bugs)
Version: unspecified
Hardware: Other other
: P3 normal
Target Milestone: Unsorted
Assignee: Ian 'Hixie' Hickson
QA Contact: contributor
URL: https://html.spec.whatwg.org/#custom-...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-09-22 07:46 UTC by contributor
Modified: 2014-09-24 22:50 UTC (History)
4 users (show)

See Also:

Attachments

Description contributor 2014-09-22 07:46:59 UTC 
Specification: https://html.spec.whatwg.org/multipage/webappapis.html
Multipage: https://html.spec.whatwg.org/multipage/#custom-handlers:dom-navigator-registerprotocolhandler
Complete: https://html.spec.whatwg.org/#custom-handlers:dom-navigator-registerprotocolhandler
Referrer: https://html.spec.whatwg.org/multipage/

Comment:
Reportedly Firefox cannot match the whitelist approach for
registerProtocolHandler(). See
https://bugzilla.mozilla.org/show_bug.cgi?id=1056860#c6 for more information.

Posted from: 46.127.136.57 by annevk@annevk.nl
User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:35.0) Gecko/20100101 Firefox/35.0
Comment 1 Ian 'Hixie' Hickson 2014-09-22 16:42:45 UTC 
Blacklisting a list of schemes instead of whitelisting is a security vulnerability. That's a non-starter. That's why we have web+*:.
Comment 2 Anne 2014-09-22 16:45:29 UTC 
Daniel, care to weigh in here?
Comment 3 Daniel Veditz 2014-09-22 17:16:51 UTC 
I think Firefox is buggy; I'm not requesting any spec changes.
Comment 4 Ian 'Hixie' Hickson 2014-09-24 22:50:42 UTC 
Ok. Marking WORKSFORME per comment 3; let me know if I misunderstood. Cheers!