bugtraq - Re: New possible scam method : forged websites using XUL (Firefox)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 03 Aug 2004 13:13:42 -0500
From: Kim Scarborough <kjs@...icago.edu>
To: bugtraq@...urityfocus.com
Subject: Re: New possible scam method : forged websites using XUL (Firefox)


> So I started to look for the "existing pref", and sure enough, if you
> write
> 
> user_pref("dom.disable_window_open_feature.location", true);
> 
> in your prefs.js, the spoof looks much less convincing.

Small point: editing prefs.js is deprecated. That should go in user.js instead.

-- 
----------------------------------------------------------------------------
Kim Scarborough                                  Web Systems Administrator
University of Chicago/NSIT                       (773) 834-7740
----------------------------------------------------------------------------
Now listening to: Johnny Cash - "Would You Lay with Me (In a Field of Stone)"
----------------------------------------------------------------------------