[Bug 1065126]

Mak77 1065126 at bugs.launchpad.net
Fri May 31 15:58:33 UTC 2019

There's too many proposals and opinions here to be able to make a choice that will satisfy everyone.
There are 2 possible ways out, that I see, that are not exclusive:
1. hide the "Remember my choice" checkbox when it can't be respected. While this doesn't solve the problem (it hides it under the carpet), it would be less surprising and infuriating for the user. This is pretty much bug 285976, afaict. I think it'd be a safe thing to do regardless and wouldn't prevent future and better fixes.
2. Just let the user action go through, that is basically what the other browsers are doing (at least Chrome, I just tried through this test page: http://demo.borland.com/testsite/download_testpage.php) . The fact is this solution is a lot more complex and thus will require more time, because someone with a good grasp about the security implications here should make a call. That's not me unfortunately.

I don't think we'd be adding a pref, a pref like this is the classical footgun, either this is a security risk or it is not, a pref doesn't solve that and can be easily under-evaluated.
I finally wonder if add-ons can work similarly to a pref for user willing this behavior, wouldn't something like https://addons.mozilla.org/en-US/firefox/addon/inlinedisposition-reloaded/ basically do what most are asking for? If an add-on could replace the request for a pref, it would pretty much solve 2 without exposing everyone to possible risks.

I know this is not a finalized answer, but the question was whether this
is a wontfix. I don't think it is, it just needs some middle steps and
investigation to figure out the actual risk, and why other browsers
think that risk is moot.

You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.

  "Always do this from now on" does not work

To manage notifications about this bug go to:

More information about the Ubuntu-mozillateam-bugs mailing list