DataURL Download links crash Edge

Fixed, not yet flighted Issue #7160092

Details

Author
XFox P.
Created
Apr 9, 2016
Privacy
This issue is public.
Found in
  • Microsoft Edge
Reports
Reported by 3 people

Sign in to watch or report this issue.

Steps to reproduce

Click a link like this:
<a href="data:text/plain,test" download="test.txt">Crash Edge</a>
Edge will crash without warning. No errors are shown. Even worse, such a link could be created and clicked via scripting.

Attachments

0 attachments

    Comments and activity

    • Microsoft Edge Team

      Changed Assigned To to “Travis L.”

    • Just re-iterating from https://www.w3.org/TR/html5/links.html#as-a-download

      “Let proposed filename have the value of the download attribute” (for user experience sake, but don’t forget security).

      Recommended previously:
      https://wpdev.uservoice.com/forums/257854-microsoft-edge-developer/suggestions/6261278-a-download-attribute

    • Microsoft Edge Team

      Changed Assigned To to “Dave B.”

      Changed Assigned To from “Dave B.” to “Scott B.”

      Changed Assigned To from “Scott B.” to “Jason O.”

      Changed Status to “Confirmed”

    • Possible similar issue: https://developer.microsoft.com/en-us/microsoft-edge/platform/issues/5567178/

      This report has a smaller repro though.

    • Microsoft Edge Team

      Changed Assigned To to “Travis L.”

      Changed Status from “Confirmed”

      Changed Assigned To to “Venkat K.”

      Changed Assigned To from “Venkat K.” to “Divya G.”

      Changed Status to “In code review”

      Changed Status from “In code review” to “In progress”

      Changed Status from “In progress” to “In code review”

      Changed Status from “In code review” to “In progress”

      Changed Status from “In progress” to “Fixed, not yet flighted”

    • Still crashes latest version of Edge, 38.14352.1002.0.

    • The fix for this issue is available starting in EdgeHTML 14.14357, so you should see it in the latest Insider release.

    You need to sign in to your Microsoft account to add a comment.

    Sign in