full-disclosure - mozilla firefox 0.8 - linux (probably mozilla too) cut/paste (semi) vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1083173539.12272.5.camel@vega>
From: nix at syndicalist.net (Henrik Persson)
Subject: mozilla firefox 0.8 - linux (probably
	mozilla too) cut/paste (semi) vulnerability

On Wed, 2004-04-28 at 18:31, Michael Williamson wrote:
> This isn't as much a typical vulnerability as it is poorly-designed
> behavior. I've noticed when cutting/pasting data (unix style, w/middle
> mouse button) into a Web form, any attempt to paste into an area without
> first clicking on the input will result in firefox doing a google search
> on the contents of the paste.  If I happen to be cutting/pasting
> confidential data, this is bad.

..please. Do you paste confidential data into webforms often? :D

You can turn off that behaviour, you know. about:config in your
mozilla/firefox and look for some option that looks nice.

D'oh.

-- 
Henrik Persson <nix@...dicalist.net>