Comments on: chrome protocol directory traversal http://blog.mozilla.com/security/2008/01/22/chrome-protocol-directory-traversal/ Thu, 19 Nov 2009 15:36:11 -0800 http://wordpress.org/?v=2.8.6 hourly 1 By: bob http://blog.mozilla.com/security/2008/01/22/chrome-protocol-directory-traversal/comment-page-1/#comment-15852 bob Thu, 24 Jan 2008 20:59:39 +0000 http://blog.mozilla.com/security/2008/01/22/chrome-protocol-directory-traversal/#comment-15852 clicking on a link in Thunderbird to open in Firefox does not work - I have to manually drag it onto Firefox. what do I do to fix it? Is it due to this newly discovered problem and what do I do to prevent it? if a registry issue, where at in the registry would it be? would reinstall of both Thunderbird and Firefox cause me to loose my settings and data? Thank you clicking on a link in Thunderbird to open in Firefox does not work – I have to manually drag it onto Firefox.

what do I do to fix it?

Is it due to this newly discovered problem and what do I do to prevent it?

if a registry issue, where at in the registry would it be?

would reinstall of both Thunderbird and Firefox cause me to loose my settings and data?

Thank you

]]> By: mike http://blog.mozilla.com/security/2008/01/22/chrome-protocol-directory-traversal/comment-page-1/#comment-15805 mike Thu, 24 Jan 2008 15:24:28 +0000 http://blog.mozilla.com/security/2008/01/22/chrome-protocol-directory-traversal/#comment-15805 NoScript is useless because you can exploit this flaw with a plain HTML code without using javascript: a simple chrome link is enough to exploit this flaw to steal data! NoScript is useless because you can exploit this flaw with a plain HTML code without using javascript: a simple chrome link is enough to exploit this flaw to steal data!

]]> By: Giorgio Maone http://blog.mozilla.com/security/2008/01/22/chrome-protocol-directory-traversal/comment-page-1/#comment-15666 Giorgio Maone Wed, 23 Jan 2008 17:46:51 +0000 http://blog.mozilla.com/security/2008/01/22/chrome-protocol-directory-traversal/#comment-15666 The NoScript extension prevents chrome: URIs from being loaded as scripts in content pages, effectively making this bug unexploitable no matter if the page is trusted or not. The NoScript extension prevents chrome: URIs from being loaded as scripts in content pages, effectively making this bug unexploitable no matter if the page is trusted or not.

]]>