Jeff Mesnil
Weblog · About

Accepting file:// URL from localhost HTTP server

January 7, 2005

I have got a stupid problem: I have a HTTP server on localhost which serve web pages containing links to file:// URLs.

Firefox refused to open these URLs (which is completely understandable to avoid security holes). In fact, you can't load them by clicking on the link but you can load them by dragging the URL to Firefox address bar.

If I want to load them by click, I can bypass Firefox security by setting security.checkloaduri property to false (in about:config preferences page). However it will also expose this security hole to any HTTP server which is clearly not acceptable. What I'd like is that Firefox accepts to load file:// URL from http://localhost only but not from any other HTTP server.

I can't find documentation to enable this... I need to look for another solution to this problem...