From: Mark Hobley on
Hans Schmucker discovered a security flaw (mozilla bugzilla #417798) against
the browser history that was fixed.

However, does the same bug exist if a javascipt url is embedded within a web
page? If so, would this be now be fixed too?

Does anyone know if a similar vulnerability occurs when browsing web pages?

Mark.

--
Mark Hobley
Linux User: #370818 http://markhobley.yi.org/

From: Bill Marcum on
["Followup-To:" header set to comp.os.linux.misc.]
On 2010-05-02, Mark Hobley <markhobley(a)hotpop.donottypethisbit.com> wrote:
> Hans Schmucker discovered a security flaw (mozilla bugzilla #417798) against
> the browser history that was fixed.
>
> However, does the same bug exist if a javascipt url is embedded within a web
> page? If so, would this be now be fixed too?
>
> Does anyone know if a similar vulnerability occurs when browsing web pages?
>
> Mark.
>
I don't know, but I recommend using NoScript.