217195 (patch by Jesse Ruderman) - security hole in markLinkVisited (exploited with link.href usage)
219875 (patch by Mike Connor) - localize strings for provisional security UI in Advanced Options panel
- make the call to saveURL from the Alt+Click handling pass the 'skipPrompt' flag, and also make the code in contentAreaUtils.js not overwrite existing files similar to 215194.
- use an independent lastDir pref to contain the last directory saved to from a Save As dialog. browser.download.dir becomes a default for autodownload only.
http://bugzilla.mozilla.org/show_bug.cgi?id=214259
Firebird Download System Upgrades.
base/content/contentAreaUtils.js
- Make saveURI function check for default download folder pref, which if
set does not show the pick file dialog, obeying the users's preferences
about automatic downloads
- Add a check to the show-file-picker case, if browser.download.dir is
not set (first run) show the Desktop or something instead of the app's
install directory.
- First cut at pref for a default download directory, and options to open the download sidebar when starting a download and whether to prompt for a filename. Under construction!