I don't think this affects our security too much, although it does sound
like a bug. Not being able to see the information in Page Info is not a
security risk. If they could forge the data in Page Info, that would be
a security problem.
- Mitch
Chris Lee wrote:
> I am quiter new to XUL stuff , but if you look at the discussions in
> the UI list you will see a mail titled Turn a jar into an xpi.
> If you go to the link in that page it loads a game in the browser that
> is totaly lacking in information in the page info section.
> This to me is a way page writers can get around allowing the user to
> know what is going on.
> How do you think this affects our security etc?
>
