non-snap version of FF under Ubuntu 22.04?

[Volker Wysk]

Am Donnerstag, dem 27.04.2023 um 13:48 -0500 schrieb Tommy Trussell:
> On Thu, Apr 27, 2023 at 10:59 AM Volker Wysk <post at volker-wysk.de> wrote:
> > Am Donnerstag, dem 27.04.2023 um 10:27 -0500 schrieb Tommy Trussell:
> > > As others have said, I use Firefox snap and I've had no problem
> > > opening
> > > "random local HTML files." 
> > 
> > I can't open local HTML files that reside outside of my home directory
> > (and
> > its subdirectories). I can't open, for instance, something in
> > /usr/local/...
> > 
> > Can you open files outside, or are you just referring to files in your
> > home
> > directory?
> > 
> 
> 
> I was just able to 
> 
> $ cd /usr/share/libreoffice/help
> $ firefox  index.html
> 
> that file opened fine.
> 
> HOWEVER you are correct that I cannot open things under /usr/local
> 
> I used sudo to copy a file to /usr/local/temp/test.html
> 
> $ firefox /usr/local/temp/test.html
> 
> Firefox could NOT see that file
> 
> $ sudo firefox /usr/local/temp/test.html
> mkdir: cannot create directory '/run/user/0': Permission denied
> Authorization required, but no authorization protocol specified
> Error: cannot open display: :0
> 
> SO yes you can't open just ANY file. I tinkered with permissions, and
> despite chown-ing the temp directory and test file, I still could not open
> it. (NOTE just to be clear, the vast majority of users would NOT want a
> web browser to be able to modify or even open files anywhere in the file
> system for security reasons. See Oliver Grawert's comments in this
> thread.)

I've looked at Oliver's comments, but what would that security reasons be? I
don't know for sure, but I would be surprised if a non-local web page, which
is loaded by a browser, could access any local files.

If this indeed is the case, then of course it would be a security flaw. But
then the root of the problem should be addressed, not the whole browser
restricted.

Cheers,
Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20230428/bc8853eb/attachment.sig>