Closed Bug 17538 Opened 25 years ago Closed 25 years ago

document.lastModified is exposed

Categories

(Core :: Security, defect, P3)

Product:
Core
Component:
Security
Platform:
x86
Windows 95
Type:
defect

Tracking

()

Status:
VERIFIED FIXED

People

(Reporter: joro, Assigned: norrisboyd)

References

(
URL
)

Details

Acess is allowed to document.lastModified, which allows seeing the last
modification date of any document.
The code is:
------------------------------------------
<SCRIPT>
s="http://www.mozilla.org/index.html";
a=window.open(s);
setTimeout("alert('The last modification date of '+s+' is
'+a.document.lastModified);",10000);
</SCRIPT>
------------------------------------------
Status: NEW → ASSIGNED
Target Milestone: M14
Status: ASSIGNED → RESOLVED
Closed: 25 years ago
Resolution: --- → FIXED
Verified fixed.
Status: RESOLVED → VERIFIED
QA Contact: dshea → junruh
Bulk moving all Browser Security bugs to new Security: General component.  The 
previous Security component for Browser will be deleted.
Component: Security → Security: General
You need to log in before you can comment on or make changes to this bug.