Closed Bug 739133 Opened 13 years ago Closed 13 years ago

Blocklist HTTPS Everywhere

Categories

(Toolkit :: Blocklist Policy Requests, defect)

Product:
Toolkit
Component:
Blocklist Policy Requests
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: tanner, Unassigned)

Details

HTTPS Everywhere seems to have a flaw, which the URL bar to be spoofed, see Bug 739099 comment 0 for more complete details.
This minor spoofing flaw doesn't seem worthy of blocklisting, particularly given that the developers seem to already be on it (https://trac.torproject.org/projects/tor/ticket/5477#comment:1).
Yeah, I don't think there's a high risk at the moment and the developers are already on it.
Group: client-services-security
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → INVALID
Removing security flag since this is a publicly known issue.
Group: client-services-security
Soon 10 days, and no activity on their bug. I asked, but no answers... It's just to inform you, you'll take the right decision accordingly :)
Product: addons.mozilla.org → Toolkit
You need to log in before you can comment on or make changes to this bug.