[Bug 25830]

Hramrach-gmail 25830 at bugs.launchpad.net
Tue May 10 17:59:55 UTC 2011


(In reply to comment #201)
> (In reply to comment #199)
> > I'm curious how the extension avoids the security issues that a naive
> > implementation would have.
> 
> Just to clarify, the extension doesn't protect users from malicious scripts
> when viewing documents as html. I'll see if I can do something like bug
> 504441 inside the extension, or maybe show a warning when viewing a mime
> type that runs scripts.
> 
> By the way, I noticed that Opera 10 doesn't protect the user from these
> kinds of security issues.

Nor does Firefox, on any content that is HTML from the start or
relabeled as such by the extension.

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/25830

Title:
  Option to display file in browser, treat as text/plain




More information about the Ubuntu-mozillateam-bugs mailing list