On 22/03/12 20:15, Yvan Boily wrote:
> If we did this, would it be feasible to analyze user input into DOM
> elements and raise warnings if personal data is entered into documents
> loaded from "bad" sites? 

I would expect such sites to take the data as soon as it's entered and
spirit it away via XMLHTTPRequest, rather than waiting for a form
submission.

Gerv
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to