DokuWiki

IMPORTANT!

This is the old issue tracking system for DokuWiki. Issues can not be added here anymore. Pleaser refer to https://github.com/splitbrain/dokuwiki/issues for the new system.

IMPORTANT!
Tasklist

FS#151 - IE support of windows shares is actually a security bug, but it can be enabled in Firefox, too :-)

Attached to Project: DokuWiki
Opened by Gábor Ziegler (gziegler) - Wednesday, 16 February 2005, 15:38 GMT
Task Type Feature Request
Category Security
Status Closed
Assigned To No-one
Operating System All
Severity Low
Priority Normal
Reported Version none
Due in Version Undecided
Due Date Undecided
Percent Complete 0%
Votes 0
Private No

Details

Currently DokuWiki produces a warning about wikilinks to Windows shares, saying that it will work only in IE.
It also work in Firefox, but it is DELIBERATEDLY DISABLED for good security reasons. However, it can be enabled, if you like to live dangerously. :-)
Actually, that it works in MISE is a security bug of MSIE.

To be more precise: not the windows shares, but the whole "file:" URL scheme is disabled, if the URL scheme of the referring page is not "file:" itself, that is, the file has NOT been obtained locally.

If the URL of the referring page starts with "file:", however, i.e., the page has been fetched from lcoal disk, then "file:" links work as intended with the default security settings.

Please refer to:
http://www.mozilla.org/quality/networking/docs/netprefs.html

If you toggle the setting security.checkloaduri to 'false', then, voila, the windows-share-links starts to work in Firefox, too.

I suggest to modify the alert text accordingly.
This task depends upon

Closed by  Andreas Gohr (andi)
Wednesday, 16 February 2005, 20:32 GMT
Reason for closing:  Implemented
Comment by Gábor Ziegler (gziegler) - Wednesday, 16 February 2005, 15:56 GMT
Actually, I have to admit, the file:// URL-s neither works in MSIE in the "Internet" security zone with the default security settings.
Comment by Andreas Gohr (andi) - Wednesday, 16 February 2005, 20:32 GMT
Thanks for the info! I updated the syntax file accordingly. I think changing the alert box isn't nessessary - We don't want to encourage users to disable security, don't we? ;-)

Loading...