RE: Two Vulnerabilities in Mozilla may lead to remote compromise

[Pavel Kankovsky <peak () argo troja mff cuni cz>]

On Tue, 13 Jul 2004, Jelmer wrote:

> I was under the impression that mozilla firefox disallowed access to local
> files (not sure about mozilla but I assume it's the same)
>
> When I link to a local file from the internet, I get a
> Security Error: Content at http:///.... May not load or link to 
> File:/// ...

This behaviour depends on security.checkloaduri. True, the default value,
disallows links from http: et al to file:

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."