Tab Mix Plus • View topic - CRITICAL: "filetype open in current tab" bypass FF

View unanswered posts | View active topics

Board index » General » Problems & Questions

All times are UTC - 6 hours [ DST ]

CRITICAL: "filetype open in current tab" bypass FF

Moderators: makondo, onemen

Page 1 of 1

[ 2 posts ]

Print view

Previous topic | Next topic

Author

Message

goofrider

Post subject: CRITICAL: "filetype open in current tab" bypass FF

Posted: Wed Sep 07, 2005 12:04 am

Joined: Tue Sep 06, 2005 11:59 pm
Posts: 1

If you enable the option "Links with target attribute or filetype opens in current tab", and XPI is in the list of the filetypes (which is the default), you'll be able to install extension from ANY website, completely bypasses FireFox's list of "Allowed Web Sites" to install extensions.

This is a serious security issue. Please remove XPI from the list of filetypes.

Top

GaryR

Post subject:

Posted: Wed Sep 07, 2005 12:47 am

Admin

Joined: Tue Aug 02, 2005 10:34 pm
Posts: 2074
Location: Houston, Texas

i removed xpi from the betas present

Top

Page 1 of 1

[ 2 posts ]

Board index » General » Problems & Questions

All times are UTC - 6 hours [ DST ]

Who is online

Users browsing this forum: No registered users and 2 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum