Closed Bug 273374 Opened 20 years ago Closed 20 years ago

bugzilla.mozilla.org is whitelisted as extension site

Categories

(SeaMonkey :: Preferences, defect)

Product:
SeaMonkey
Component:
Preferences
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: danielwang, Assigned: dveditz)

Details

(Whiteboard: [good first bug])

in Mozilla Suite, "mozilla.org" is listed in preference "xpinstall.whitelist.add". This means that users can be tricked into installing extensions from bugzilla.mozilla.org (which is HTTPS!). Suggested remedy: change the default value from "mozilla.org, mozdev.org, texturizer.net" to "update.mozilla.org" (as in Firefox)
Doesn't need to be security confidential, whitelisting not active anyway
Assignee: xpi-packages → dveditz
Group: security
Component: Installer: XPI Packages → Preferences
Whiteboard: [good first bug]
Checked in with fix for bug 272764 on 2004-01-05
Status: NEW → RESOLVED
Closed: 20 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.