Home / vulnerabilities firefox-inherit.txt
Posted on 04 December 2007
Source : packetstormsecurity.org Link
I found that Firefox 2.0.0.10 will inherit the charset of the parent
page, when that had been selected manually (does not inherit the charset
specified in headers or meta). I found this inheritance to work both
with [a href] links and [iframe src] in the parent page.
See also:
http://www.mozilla.org/security/announce/2007/mfsa2007-02.html
https://bugzilla.mozilla.org/show_bug.cgi?id=356280
Cheers,
Paul Szabo psz@maths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics University of Sydney Australia
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/