<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Component Directory Lockdown &#8211; New in Firefox 3.6</title>
	<atom:link href="http://blog.mozilla.com/security/2009/11/16/component-directory-lockdown-new-in-firefox-3-6/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.mozilla.com/security/2009/11/16/component-directory-lockdown-new-in-firefox-3-6/</link>
	<description></description>
	<lastBuildDate>Fri, 11 Nov 2011 11:23:21 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
	<item>
		<title>By: Home Security Cameras</title>
		<link>http://blog.mozilla.com/security/2009/11/16/component-directory-lockdown-new-in-firefox-3-6/comment-page-1/#comment-108546</link>
		<dc:creator>Home Security Cameras</dc:creator>
		<pubDate>Wed, 13 Jan 2010 04:41:39 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.com/security/?p=213#comment-108546</guid>
		<description>This sounds like a great idea. Not that Firefox crashes often on my Mac anyway, but I have had issues with extensions, on a few occasions after a crash.</description>
		<content:encoded><![CDATA[<p>This sounds like a great idea. Not that Firefox crashes often on my Mac anyway, but I have had issues with extensions, on a few occasions after a crash.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: OuT</title>
		<link>http://blog.mozilla.com/security/2009/11/16/component-directory-lockdown-new-in-firefox-3-6/comment-page-1/#comment-108543</link>
		<dc:creator>OuT</dc:creator>
		<pubDate>Mon, 11 Jan 2010 01:26:16 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.com/security/?p=213#comment-108543</guid>
		<description>I know nsIQTScriptablePlugin.xpt will still be copied, but simply ignored, and won&#039;t block essential QT stuff. Nevertheless Apple has to fix this.

By the way, could you tell me a concrete application of XPCOM with QT ? I cannot find anyone... I&#039;m also searching for an application of XPCOM with Flash Player (flashplayer.xpt, it used to be installed directly in components dir, some time ago).

I&#039;d simply like to know the purpose of these components :)</description>
		<content:encoded><![CDATA[<p>I know nsIQTScriptablePlugin.xpt will still be copied, but simply ignored, and won&#8217;t block essential QT stuff. Nevertheless Apple has to fix this.</p>
<p>By the way, could you tell me a concrete application of XPCOM with QT ? I cannot find anyone&#8230; I&#8217;m also searching for an application of XPCOM with Flash Player (flashplayer.xpt, it used to be installed directly in components dir, some time ago).</p>
<p>I&#8217;d simply like to know the purpose of these components <img src='http://blog.mozilla.com/security/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Daniel Veditz</title>
		<link>http://blog.mozilla.com/security/2009/11/16/component-directory-lockdown-new-in-firefox-3-6/comment-page-1/#comment-108542</link>
		<dc:creator>Daniel Veditz</dc:creator>
		<pubDate>Mon, 11 Jan 2010 01:02:50 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.com/security/?p=213#comment-108542</guid>
		<description>OuT: The change here does not stop programs from copying files into the component directory. They shouldn&#039;t have been doing so (there are several well-defined mechanisms by which they can add their stuff that don&#039;t involve mucking with the installation directory of another product), but acknowledging that they do we simply don&#039;t load components that were not built with the product.

.xpt files are simply data structures describing interfaces, they are not executable code. If we don&#039;t load the associated components then those interfaces will not be used.</description>
		<content:encoded><![CDATA[<p>OuT: The change here does not stop programs from copying files into the component directory. They shouldn&#8217;t have been doing so (there are several well-defined mechanisms by which they can add their stuff that don&#8217;t involve mucking with the installation directory of another product), but acknowledging that they do we simply don&#8217;t load components that were not built with the product.</p>
<p>.xpt files are simply data structures describing interfaces, they are not executable code. If we don&#8217;t load the associated components then those interfaces will not be used.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: OuT</title>
		<link>http://blog.mozilla.com/security/2009/11/16/component-directory-lockdown-new-in-firefox-3-6/comment-page-1/#comment-108540</link>
		<dc:creator>OuT</dc:creator>
		<pubDate>Sun, 10 Jan 2010 06:47:32 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.com/security/?p=213#comment-108540</guid>
		<description>Hi,

QuickTime still copies nsIQTScriptablePlugin.xpt into the components dir... how this case will be handled ?

Regards</description>
		<content:encoded><![CDATA[<p>Hi,</p>
<p>QuickTime still copies nsIQTScriptablePlugin.xpt into the components dir&#8230; how this case will be handled ?</p>
<p>Regards</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: markafoni davetiyesi</title>
		<link>http://blog.mozilla.com/security/2009/11/16/component-directory-lockdown-new-in-firefox-3-6/comment-page-1/#comment-108539</link>
		<dc:creator>markafoni davetiyesi</dc:creator>
		<pubDate>Wed, 06 Jan 2010 18:35:40 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.com/security/?p=213#comment-108539</guid>
		<description>Firefox 3.6 has not been released yet, you do not have “ff 3.6 final”. Keep reporting those crashes: that’s how we know which ones are the most important to focus on. If you’re crashing 20 times a day, though, you’re suffering from some software incompatibility between Firefox and something else on your system. Please visit the forums at http://support.mozilla.com and they can help you figure out what’s going on from you reported crashes and probably help you identify the culprit.</description>
		<content:encoded><![CDATA[<p>Firefox 3.6 has not been released yet, you do not have “ff 3.6 final”. Keep reporting those crashes: that’s how we know which ones are the most important to focus on. If you’re crashing 20 times a day, though, you’re suffering from some software incompatibility between Firefox and something else on your system. Please visit the forums at <a href="http://support.mozilla.com" rel="nofollow">http://support.mozilla.com</a> and they can help you figure out what’s going on from you reported crashes and probably help you identify the culprit.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Daniel Veditz</title>
		<link>http://blog.mozilla.com/security/2009/11/16/component-directory-lockdown-new-in-firefox-3-6/comment-page-1/#comment-108403</link>
		<dc:creator>Daniel Veditz</dc:creator>
		<pubDate>Thu, 19 Nov 2009 15:36:11 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.com/security/?p=213#comment-108403</guid>
		<description>I read too quickly and assumed you were talking about this blog post, but you were talking about addon compatibility version checks which is something else entirely. Beta users do sign up for a little pain in that regard, but you can help if you like by using the Addon Compatibility Reporter which will reenable all of your addons and let you report which ones work and which don&#039;t.

https://addons.mozilla.org/en-US/firefox/addon/15003

Or you can wait until after we ship 3.6 by which point most of the addons should be compatible.</description>
		<content:encoded><![CDATA[<p>I read too quickly and assumed you were talking about this blog post, but you were talking about addon compatibility version checks which is something else entirely. Beta users do sign up for a little pain in that regard, but you can help if you like by using the Addon Compatibility Reporter which will reenable all of your addons and let you report which ones work and which don&#8217;t.</p>
<p><a href="https://addons.mozilla.org/en-US/firefox/addon/15003" rel="nofollow">https://addons.mozilla.org/en-US/firefox/addon/15003</a></p>
<p>Or you can wait until after we ship 3.6 by which point most of the addons should be compatible.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Daniel Veditz</title>
		<link>http://blog.mozilla.com/security/2009/11/16/component-directory-lockdown-new-in-firefox-3-6/comment-page-1/#comment-108402</link>
		<dc:creator>Daniel Veditz</dc:creator>
		<pubDate>Thu, 19 Nov 2009 15:30:00 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.com/security/?p=213#comment-108402</guid>
		<description>This feature is not about addons, this prevents 3rd party software from hooking into Firefox in a way that is guaranteed to break (and does) at the next major update. Possibly on a minor update for binary components depending if they were using an interface we had to patch. This was never a recommended or even documented mechanism for extending Firefox, and we&#039;ve found a large percentage of the crashes experienced by Firefox 3.5 users is due to 3rd party components hooked in this way.

Plugins and Addons hooked in through the documented places certainly do cause their share of stability problems also, but since it is possible for users to know about and manage them we do let you make your own tradeoff between functionality and possible instability.</description>
		<content:encoded><![CDATA[<p>This feature is not about addons, this prevents 3rd party software from hooking into Firefox in a way that is guaranteed to break (and does) at the next major update. Possibly on a minor update for binary components depending if they were using an interface we had to patch. This was never a recommended or even documented mechanism for extending Firefox, and we&#8217;ve found a large percentage of the crashes experienced by Firefox 3.5 users is due to 3rd party components hooked in this way.</p>
<p>Plugins and Addons hooked in through the documented places certainly do cause their share of stability problems also, but since it is possible for users to know about and manage them we do let you make your own tradeoff between functionality and possible instability.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Zetaprime</title>
		<link>http://blog.mozilla.com/security/2009/11/16/component-directory-lockdown-new-in-firefox-3-6/comment-page-1/#comment-108399</link>
		<dc:creator>Zetaprime</dc:creator>
		<pubDate>Thu, 19 Nov 2009 06:10:50 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.com/security/?p=213#comment-108399</guid>
		<description>Is there anyway to disable this feature? I&#039;d like to be able to decide which addons I can keep and not have Firefox tell me I can&#039;t use them. I already had to uninstall 3.6 beta 3 and go back to beta 2 to get my addons back. Let me decide if I can live with a certain degree of instability in exchange for the functionality many of these addons provide.</description>
		<content:encoded><![CDATA[<p>Is there anyway to disable this feature? I&#8217;d like to be able to decide which addons I can keep and not have Firefox tell me I can&#8217;t use them. I already had to uninstall 3.6 beta 3 and go back to beta 2 to get my addons back. Let me decide if I can live with a certain degree of instability in exchange for the functionality many of these addons provide.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Daniel Veditz</title>
		<link>http://blog.mozilla.com/security/2009/11/16/component-directory-lockdown-new-in-firefox-3-6/comment-page-1/#comment-108397</link>
		<dc:creator>Daniel Veditz</dc:creator>
		<pubDate>Wed, 18 Nov 2009 19:47:10 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.com/security/?p=213#comment-108397</guid>
		<description>In what other application is it normal to modify their installation directory? We have published for years several appropriate ways to extend Firefox and this was not one of them. It happened to work, but it was never a supported way for 3rd parties to modify a Firefox installation.</description>
		<content:encoded><![CDATA[<p>In what other application is it normal to modify their installation directory? We have published for years several appropriate ways to extend Firefox and this was not one of them. It happened to work, but it was never a supported way for 3rd parties to modify a Firefox installation.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dis Gruntled</title>
		<link>http://blog.mozilla.com/security/2009/11/16/component-directory-lockdown-new-in-firefox-3-6/comment-page-1/#comment-108396</link>
		<dc:creator>Dis Gruntled</dc:creator>
		<pubDate>Wed, 18 Nov 2009 18:35:51 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.com/security/?p=213#comment-108396</guid>
		<description>Once again, Mozilla shows love to their large developer base by easing in a significant change thru a tried-and-true deprecation process, whereby developers are encouraged to make the necessary changes over a period of time, many months in advance of Firefox dropping a key feature.

Wait... um...  OK, scratch that.  Nevermind.</description>
		<content:encoded><![CDATA[<p>Once again, Mozilla shows love to their large developer base by easing in a significant change thru a tried-and-true deprecation process, whereby developers are encouraged to make the necessary changes over a period of time, many months in advance of Firefox dropping a key feature.</p>
<p>Wait&#8230; um&#8230;  OK, scratch that.  Nevermind.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

