Tickets :: Comment on [#5892] Linked attachment feature vulnerability

* Your Email Address
* Spam protection	Enter the letters below: .__ .___.\ /. ..__ [__) \| >< \|\/\|[__) \| \| / \\| \|\| \
Comment	> It looks like the Mozilla folks at least accepted that this is their own bug: > > http://blog.mozilla.com/security/2007/11/16/jar-protocol-xss-security-issues/ > > > > We should wait for their final measures to deal with that problem and > then reconsider if we still need to add some additional protection.
Attachment
Watch this ticket