Member Avatar for senthil12345

When i type in the following link manually in firefox as " file://///172.16.2.1/copyediting/ELS/mallet.pdf", pdf file is loaded successfully in the firefox browser. PDF file is located in remote server which is referred by IP 172.16.2.1.

I've assigned the Same link in a String in jsp page and tested it through my tomcat application as

<%
String linktotest="file://///172.16.2.1/copyediting/ELS/mallet.pdf";
%>

<a href="<%=linktotest%>">link</a>

when i click on the hyperlink , the pdf is not loaded in firefox and i'm getting the following error in firefox error console

Security Error: Content at http://172.16.3.222:8080/FMS/source/journal/ProductionEntry.jsp may not load or link to file://///172.16.2.1/copyediting/ELS/mallet.pdf

can any one please give me the solution.

  • 2 Contributors
  • 1 Reply
  • 173 Views
  • 5 Days Discussion Span
  • Latest Post Latest Post by ~s.o.s~
Member Avatar for ~s.o.s~

> Security Error:

It seems as though Firefox distinguishes between unsafe URI embedded in web pages and those written out explicitly in the location bar. IMO, this happens so because native executables when accessed using the FILE protocol directly execute and this might pose a *big* security vulnerability if the user has admin rights or if the referenced resource is something malicious. To try it out, type file://C:/WINDOWS/system32/cmd.exe in your location bar if using Windows and see for yourself.

A sensible workaround: serve the files using HTTP; i.e. run a HTTP server on the target machine or the machine on which the application is deployed and reference the resource via the HTTP protocol. FTP is also a viable option.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.