What is meta? ×
Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 131 Stack Exchange communities.

Possible Duplicate:
Links with URIs of schemes other than http/https are broken

On revision 5 of How to read Firefox "about:memory" correctly? I tried to set markdown links to about:memory (a special "URL" similar to about:config supported by Mozilla based browsers), ad it didn't work...

  • When I tried the naive thing (using the link button and pasting about:memory), the editor set the link to http://about:memory which obviously didn't work.
  • When I edited the "target" portion of the link syntax to be about:memory it was not rendered as a link.
  • Even trying <a href="about:memory">about:memory</a> does not seem to work in the live preview. I didn't submit that edit because there didn't seem to be a reason to further pollute the edit history.

::sigh::

Admittedly it is a rare use case, but should our markdown support a broad selection of "protocols"? If not, should pure html support it?

share|improve this question

marked as duplicate by dmckee, Rick Sladkey, Tim Stone, Jeff Atwood Aug 24 '11 at 2:42

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

    
See here for a very similar post, which, other than pointing out that a supporting change is not likely to be implemented, also points out that such links won't necessarily work from an 'unsecure' page anyway (I'm not certain of the applicability to FireFox, though.) –  Grant Thomas Aug 23 '11 at 22:36

1 Answer 1

If this was implemented I think it would need to use a whitelist. Lots of "protocols" are used to invoke third-party programs and could be abused.

For example, I don't want to click a "documentation" link and suddenly find myself downloading and helping to distribute malware because it was actually a magnet: link.

share|improve this answer
    
Good point. And and some point it just becomes more trouble than it is worth for a few use cases... –  dmckee Aug 23 '11 at 22:29
    
It didn't occur to me that cross-protocol redirects could entirely subvert this. badp pointed out that even TinyURL supports them; here's a magnet link to September's data dump: tinyurl.com/7yvfnsb –  Jeremy Banks Jan 22 '12 at 20:59

Not the answer you're looking for? Browse other questions tagged .