312108 - RSS icon can add javascript: URLs as live bookmarks

Status: VERIFIED DUPLICATE of bug 353734

(Firefox Graveyard :: RSS Discovery and Preview, defect)

Description

[Jesse Ruderman]

Split from bug 305473.

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.9a1) Gecko/20051010
Firefox/1.6a1

The RSS icon can reference a javascript: URL.  Clicking the RSS icon to add it
as a live bookmark adds a live bookmark for a javascript: URL.  The javascript:
URL doesn't seem to ever be executed, though, so this isn't a security hole by
itself.

Comment 1

[Asa Dotzler [:asa]]

What's the case where this can be exploited?

Comment 2

[Jesse Ruderman]

I don't think this can be exploited.  Fixing this would make things a safer for
extensions that extend Live Bookmark functionality (for example, a theoretical
extension that shows a Planet-like view of your Live Bookmarks) and aren't
careful with URLs.

Comment 3

[Scott MacGregor]

Vlad, when nominating a bug for RC, please provide a description about why you
think the bug in question should be a stop ship bug. That helps us evaluate
things quickly as we go through the list.

Minusing this based on Jesse's last comment about this not being exploitable. 

Comment 4

[Robert Sayre]

*** This bug has been marked as a duplicate of 353734 ***

Comment 5

[Tanner M. Young [:tmyoung]]

Verified Duplicate.