Confirmed users
2,615
edits
User:Dmose:Protocol Handler Security Review: Difference between revisions
Jump to navigation
Jump to search
User:Dmose:Protocol Handler Security Review (view source)
Revision as of 02:54, 6 November 2007
, 6 November 2007→Design Impact
| Line 75: | Line 75: | ||
*** web-based protocol handler "already been added" UI could use some tuning; filed {{bug|402258}} | *** web-based protocol handler "already been added" UI could use some tuning; filed {{bug|402258}} | ||
*** a rogue site could trick a user into registering a handler that would go to a large mail site (e.g. Yahoo mail) but via a redirector that could then sniff all requests; filed {{bug|402287}} | *** a rogue site could trick a user into registering a handler that would go to a large mail site (e.g. Yahoo mail) but via a redirector that could then sniff all requests; filed {{bug|402287}} | ||
*** verify that we don't leak various information; filed {{bug|402641}} | |||
== Exported APIs == | == Exported APIs == | ||