X
Tap here to go to the mobile version of the site.

Support Forum

block file protocol (file:///, "c:/")

Posted

I work for a university and we want Mozilla 17 in our computer labs. We have GPO on Windows 7 to blocks access to our C drive so students can't see secure files, but mozilla ignores it. Is there a way to disable typing these things such as, "file://C:/Windows" or "C:\" that gives access to the files?

I have tried a few add-ons but all they do is hide the links to the folders, but you can still execute and open files. Also I have added the following to user.js:

user_pref("capability.policy.policynames", "localfilelinks"); user_pref("capability.policy.localfilelinks.checkloaduri.enabled", "noAccess"); user_pref("capability.policy.localfilelinks.sites", "file:///");

Any help would be appreciated!

Thanks!

I work for a university and we want Mozilla 17 in our computer labs. We have GPO on Windows 7 to blocks access to our C drive so students can't see secure files, but mozilla ignores it. Is there a way to disable typing these things such as, "file://C:/Windows" or "C:\" that gives access to the files? I have tried a few add-ons but all they do is hide the links to the folders, but you can still execute and open files. Also I have added the following to user.js: user_pref("capability.policy.policynames", "localfilelinks"); user_pref("capability.policy.localfilelinks.checkloaduri.enabled", "noAccess"); user_pref("capability.policy.localfilelinks.sites", "file:///"); Any help would be appreciated! Thanks!
finitarry
  • Top 25 Contributor
243 solutions 3345 answers

Normally you would put a hostname with protocol in the "sites" setting to limit what that site may do. You are blocking "file:///" from loading links, but that is only a protocol, not a site. I think that is the problem, anyway.

Normally you would put a hostname with protocol in the "sites" setting to limit what that site may do. You are blocking "file:///" from loading links, but that is only a protocol, not a site. I think that is the problem, anyway.
An Oracle 0 solutions 3 answers

I would love to see Firefox respect the GPO to prevent viewing local drives. It doesn't exist.

I would love to see Firefox respect the GPO to prevent viewing local drives. It doesn't exist.
finitarry
  • Top 25 Contributor
243 solutions 3345 answers

If you want to block students from reading files on the computers they use, can you use "127.0.0.1" instead of "file:///"?

If you want to block students from reading files on the computers they use, can you use "127.0.0.1" instead of "file:///"?
An Oracle 0 solutions 3 answers

finitarry, are you suggesting putting that in the user.js file or somewhere else? Have you done this yourself or are you just brainstorming? Thanks.

finitarry, are you suggesting putting that in the user.js file or somewhere else? Have you done this yourself or are you just brainstorming? Thanks.
finitarry
  • Top 25 Contributor
243 solutions 3345 answers

What normally appears as the data for "sites" is the hostname of a site. I am suggesting that you use the localhost IP number. I have no idea if it will work, but it makes sense to me.

What normally appears as the data for "sites" is the hostname of a site. I am suggesting that you use the localhost IP number. I have no idea if it will work, but it makes sense to me.