Well I wasn't really making an accusation, though you seem to have put a
lot
of though into this attack vector...
Well I better, given that I am responsible for security in some bank and
telco apps.
--
anyway, if anyone wants to see this, the new code is here:
http://www.mozdev.org/source/browse/russkey/src/chrome/content/russkey/
in RussKeyInitializer.js and RussKeyUtils.js files
and the version that downloads the new XPI locally and installs it from the
localhost is here:
http://www.mozdev.org/source/browse/russkey/www/scrapped-code/
in RussKeyUtils.js
Cheers.
_______________________________________________
Project_owners mailing list
[email protected]
http://mozdev.org/mailman/listinfo/project_owners
