There's too many proposals and opinions here to be able to make a choice that 
will satisfy everyone.
There are 2 possible ways out, that I see, that are not exclusive:
1. hide the "Remember my choice" checkbox when it can't be respected. While 
this doesn't solve the problem (it hides it under the carpet), it would be less 
surprising and infuriating for the user. This is pretty much bug 285976, 
afaict. I think it'd be a safe thing to do regardless and wouldn't prevent 
future and better fixes.
2. Just let the user action go through, that is basically what the other 
browsers are doing (at least Chrome, I just tried through this test page: 
http://demo.borland.com/testsite/download_testpage.php) . The fact is this 
solution is a lot more complex and thus will require more time, because someone 
with a good grasp about the security implications here should make a call. 
That's not me unfortunately.

I don't think we'd be adding a pref, a pref like this is the classical footgun, 
either this is a security risk or it is not, a pref doesn't solve that and can 
be easily under-evaluated.
I finally wonder if add-ons can work similarly to a pref for user willing this 
behavior, wouldn't something like 
https://addons.mozilla.org/en-US/firefox/addon/inlinedisposition-reloaded/ 
basically do what most are asking for? If an add-on could replace the request 
for a pref, it would pretty much solve 2 without exposing everyone to possible 
risks.

I know this is not a finalized answer, but the question was whether this
is a wontfix. I don't think it is, it just needs some middle steps and
investigation to figure out the actual risk, and why other browsers
think that risk is moot.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1065126

Title:
  "Always do this from now on" does not work

To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/1065126/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to