HTML5 not showing locally on Firefox

Q&A about the latest versions
Post Reply
User avatar
stalwart
Posts: 651
Joined: Thu Oct 02, 2008 11:52 am

As of today, Firefox Quantum update to v.68.0, HTML5 no longer works locally for me. Anyone else having this issue?
User avatar
Hopki
Gnome
Posts: 13004
Joined: Thu Jan 10, 2008 3:16 pm
Location: Layer de la Haye, Essex UK
Contact:

Yep, they follow the crowd :-(
As a tip...
To open from an output folder either use our free desktop app the Package Viewer.
Or, open Pano2VR, go to Tools => Integrated Web Server and open.
Drag in the HTML page then click on the Address (in blue). You can then open the HTML page in your browser.
You can also copy and paste the URL and paste in other browsers as it is being served through teh web server.
MS Edge may still work!
Regards,
Hopki
Garden Gnome Support
If you send an e-mail to support please send a link to the forum post for reference.
support@ggnome.com
https://ggnome.com/wiki/documentation/
User avatar
stalwart
Posts: 651
Joined: Thu Oct 02, 2008 11:52 am

Hopki wrote: Fri Jul 12, 2019 6:57 pm Yep, they follow the crowd :-(
As a tip...
To open from an output folder either use our free desktop app the Package Viewer.
Or, open Pano2VR, go to Tools => Integrated Web Server and open.
Drag in the HTML page then click on the Address (in blue). You can then open the HTML page in your browser.
You can also copy and paste the URL and paste in other browsers as it is being served through teh web server.
MS Edge may still work!
Regards,
Hopki
Hi Martin,

Package Viewer works a treat so thanks for that. Will "delve" into the mysterious world of the Integrated Web Server! You made it look so easy at IVRPA!!

Have a good 'un

Stu
User avatar
Tony
Posts: 1341
Joined: Mon Feb 15, 2010 6:54 am
Location: Adelaide, South Australia
Contact:

stalwart wrote: Fri Jul 12, 2019 6:15 pm As of today, Firefox Quantum update to v.68.0, HTML5 no longer works locally for me. Anyone else having this issue?
Yes it was in response to this bug:

CVE-2019-11730: Same-origin policy treats all files in a directory as having the same-origin

Reporter: Luigi Gubello
Impact: moderate
Description
A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and they may uploaded to a server. Luigi Gubello demonstrated that in combination with a popular Android messaging app, if a malicious HTML attachment is sent to a user and they opened that attachment in Firefox, due to that app's predictable pattern for locally-saved file names, it is possible to read attachments the victim received from other correspondents.

Tony
Tony Redhead | Panoramic Photographer | mobile: +61438501002 | website: https://tonyredhead.com - https://redsquare.com | Pano2VR Tutorials: https://tonyredhead.com/pano2vr | instagram: https://www.instagram.com/tonyredhead/
User avatar
Tony
Posts: 1341
Joined: Mon Feb 15, 2010 6:54 am
Location: Adelaide, South Australia
Contact:

Hopki wrote: Fri Jul 12, 2019 6:57 pmopen Pano2VR, go to Tools => Integrated Web Server and open. Drag in the HTML page then click on the Address (in blue). You can then open the HTML page in your browser. You can also copy and paste the URL and paste in other browsers as it is being served through the web server.
Hi Martin,

I know it's called the "Integrated" web server but I was just wondering if it can run alone without P2VR running? Similar to the krpano Testing Server?

cheers,

Tony
Tony Redhead | Panoramic Photographer | mobile: +61438501002 | website: https://tonyredhead.com - https://redsquare.com | Pano2VR Tutorials: https://tonyredhead.com/pano2vr | instagram: https://www.instagram.com/tonyredhead/
User avatar
Hopki
Gnome
Posts: 13004
Joined: Thu Jan 10, 2008 3:16 pm
Location: Layer de la Haye, Essex UK
Contact:

Hi Tony,
It's part and parcel of Pano2VR but you could always use the package viewer, just drag and drop the output folder in.
Regards,
Garden Gnome Support
If you send an e-mail to support please send a link to the forum post for reference.
support@ggnome.com
https://ggnome.com/wiki/documentation/
User avatar
Tony
Posts: 1341
Joined: Mon Feb 15, 2010 6:54 am
Location: Adelaide, South Australia
Contact:

Hi Hopki,

Thanks for the tip re Package Viewer.

As I'm on a Mac I was wondering if you know what the situation is on a PC regarding opening locally saved HTML files in Chrome/Firefox/Edge.

On the Mac I thought Safari also blocked locally saved HTML files but it doesn't seem to be the case.

cheers,

Tony
Tony Redhead | Panoramic Photographer | mobile: +61438501002 | website: https://tonyredhead.com - https://redsquare.com | Pano2VR Tutorials: https://tonyredhead.com/pano2vr | instagram: https://www.instagram.com/tonyredhead/
User avatar
Hopki
Gnome
Posts: 13004
Joined: Thu Jan 10, 2008 3:16 pm
Location: Layer de la Haye, Essex UK
Contact:

Hi Tony,
MS Edge still opens the HTML page directly from the output folder but for how long?
Regards,
Hopki
Garden Gnome Support
If you send an e-mail to support please send a link to the forum post for reference.
support@ggnome.com
https://ggnome.com/wiki/documentation/
Post Reply