152652 - default plugin report contains absolute path to file libnullplugin.so

Status: VERIFIED DUPLICATE of bug 88183

(Core Graveyard :: Plug-ins, defect)

Description

[ravi]

at the URL above is an analyzer that reports info it has found
from the browser. listed in the info is the path to plugins,
and since this path seems to be absolute, it gives clues about
the user (his/her login, which can be used for spam since the
domain is easy to determine, his/her home directory path, etc).

below is the output:

The following plug-ins are installed on your system:
Default Plugin - The default plugin handles plugin data for mimetypes and
extensions that are not specified and facilitates downloading of new plugins. -
/home/<login-name-deleted>/apps/mozilla/plugins/libnullplugin.so

Comment 1

[Matthias Versen [:Matti]]

-> Plugins
[e-mail], [e-mail]:
This is a kown dupe filed from bbaetz but i can't search it because i know that
the bug is marked as security bug.. (and I'm not CC'ed)

Comment 2

[Matthias Versen [:Matti]]

NEW to get the developers/QA attention

Comment 3

[Peter Lubczynski]

*** This bug has been marked as a duplicate of 88183 ***

Comment 4

[shrirang khanzode]

.