I have not set it up this way on purpose. Firefox .9.3 in Windows does not have the option to prompt from the tools/downloads/options. I was able to delete the entry from Firefox here, and now the behaviour is to prompt. However also gives me the option to have the OPEN action associated with .DOC everytime. :P
This still seems like a security issue to me. I don't like the idea that FireFox allows one to configure any file type, such as .DOC or .WSC to be automatically ran. I don't think it would be too hard to exploit this by simply triggering a javascript load event to load a something the user would otherwise not want opened. Maybe by exploiting known Mozilla *features* http://secunia.com/advisories/12188/ http://secunia.com/advisories/11978/ http://secunia.com/advisories/11602/ Still blows the socks off of IE security, however. _______________________________________________ Mozilla-security mailing list [EMAIL PROTECTED] http://mail.mozilla.org/listinfo/mozilla-security
