full-disclosure - Re: Flaw in Firefox 3.0: protocol-handler.warn-external are ignored

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 19 Jun 2008 02:23:41 -0700
From: Daniel Veditz <dveditz@...zio.com>
To: carl hardwick <hardwick.carl@...il.com>
Cc: Full-Disclosure@...ts.grok.org.uk
Subject: Re: Flaw in Firefox
 3.0:	protocol-handler.warn-external are ignored

carl hardwick wrote:
> For example,
> I set network.protocol-handler.warn-external.mailto to 'true', clicked
> on an e-mail link and Windows Mail is launched without any warnings
> (tested on Firefox 3.0 on Windows Vista SP1)

That state is now saved elsewhere and managed through the "Applications" 
tab of the preferences dialog (URI schemes are mixed in with content types, 
ugly). If there's no entry in the Applications tab it should be asking you 
what to do; when it asks you can tell it not to ask any more, after which 
you'll have to use the preferences dialog to change it.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/