Bug#417796: mozilla-browser: possible information exposure

2007-04-06 Thread Caspar Bothmer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alexander Sack - Debian Bugmail wrote: |>tag 417796 wontfix |>thanks | I would even say this isn't abug at all. I disagree. | You can do much more things | with javascript. For sure, but that is a different technique. Only because you can use one

Bug#417796: mozilla-browser: possible information exposure

2007-04-06 Thread Alexander Sack - Debian Bugmail
On Fri, Apr 06, 2007 at 07:57:23AM +0200, Mike Hommey wrote: > tag 417796 wontfix > thanks I would even say this isn't abug at all. You can do much more things with javascript. So if the web-app provider wants to know how you behave on his website, he can certainly gather and transmit that info.

Bug#417796: mozilla-browser: possible information exposure

2007-04-06 Thread Caspar Bothmer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike Hommey wrote: | OMFFSM, when I click on a link, that is logged on a remote server ! | That's my privacy being violated ! That's two different things, don't you think? If I click on a link, I use that link as it is meant to be, to get further in

Bug#417796: mozilla-browser: possible information exposure

2007-04-05 Thread Mike Hommey
tag 417796 wontfix thanks On Wed, Apr 04, 2007 at 05:35:44PM +0200, Caspar Bothmer <[EMAIL PROTECTED]> wrote: > Package: mozilla-browser > Version: 2:1.7.8-1sarge10 > Severity: important > > It is possible to get information about the users' behaviour using css. > I best show it by example: > >

Bug#417796: mozilla-browser: possible information exposure

2007-04-04 Thread Caspar Bothmer
Package: mozilla-browser Version: 2:1.7.8-1sarge10 Severity: important It is possible to get information about the users' behaviour using css. I best show it by example: #24678:hover { background-image:url("24678.png") } #22578:hover { background-image:url("22578.pn