Closed Bug 13024 Opened 21 years ago Closed 20 years ago
Disable XUL download
We need to disable the ability to download XUL files to prevent a host of security exploits. See 10725 and 11457 for examples.
Assignee: gagan → rpotts
Summary: Disable XUL download → Disable XUL download
Target Milestone: M14
This doesn't seem like a necko issue. Maybe the docloader or something.
Followup on warren's comment above: are you the right owner for this? This is required for beta. M14 is too late.
cc'ing jevering as per our meeting today
Bulk move of all Necko (to be deleted component) bugs to new Networking component.
Moving Rick's M14 bugs to M13 (since he won't be here for M14). He can triage them to M15 as appropriate.
I don't see where the networking library can do anything about this. It has to be dealt with at a higher level. Maybe the docshell.
Status: NEW → RESOLVED
Closed: 20 years ago
Resolution: --- → INVALID
I think we can now allow XUL download. XUL files that don't come from chrome: URIs don't have any special privileges.
You need to log in before you can comment on or make changes to this bug.