[35949] in bugtraq
Re: New possible scam method : forged websites using XUL (Firefox)
daemon@ATHENA.MIT.EDU (Kim Scarborough)
Tue Aug 3 20:11:30 2004
Message-ID: <410FD5D6.40605@uchicago.edu>
Date: Tue, 03 Aug 2004 13:13:42 -0500
From: Kim Scarborough <kjs@uchicago.edu>
MIME-Version: 1.0
To: bugtraq@securityfocus.com
In-Reply-To: <20040803081116.GB21160@wsr.ac.at>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
> So I started to look for the "existing pref", and sure enough, if you
> write
>
> user_pref("dom.disable_window_open_feature.location", true);
>
> in your prefs.js, the spoof looks much less convincing.
Small point: editing prefs.js is deprecated. That should go in user.js instead.
--
----------------------------------------------------------------------------
Kim Scarborough Web Systems Administrator
University of Chicago/NSIT (773) 834-7740
----------------------------------------------------------------------------
Now listening to: Johnny Cash - "Would You Lay with Me (In a Field of Stone)"
----------------------------------------------------------------------------
