benc Reporter
	Description • 20 years ago

from bug 28998.
------- Additional Comment #88 From Mike Shaver  2004-09-02 10:20 PDT  

I'd happily review a patch to use a whitelist (preferably one that can be stored
in a resource file outside compiled code, for easier updating in the field) for
additional checks, but I'm not going to get to it myself any time soon.  The
current code works for most (virtually all?) installations, and I'm strapped for
time in the 1.0 schedule anyway.

Note that it must be the case that failing to update the WPAD domain whitelist
causes WPAD to fail in a case that it might otherwise succeed, and not open us
up to wpad.com-style attacks when a new TLD or sub-TLD is brought online.

	Gervase Markham [:gerv]
	Comment 1 • 20 years ago

shaver: I've read bug 28998, but it's not totally clear - could you tell us
exactly what the current behaviour is? Does it stop searching at the 4th level
for all domains?

Gerv

	benc Reporter
	Comment 2 • 17 years ago

Gerv:

Is there a proper way to modify this bug so it says: wpad needs to be hooked up to effective TLD service?

I'm still getting caught up on what that new stuff does.

	Gervase Markham [:gerv]
	Comment 3 • 17 years ago

benc: Just change the title :-) I think that it would be absolutely right for WPAD to use the Effective TLD service.

Gerv

	Firefox Bug Husbandry Bot
	Comment 4 • 7 years ago

Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258