Geeze...here we go again!

I just read this on another group and would like to know the truth of this since I've just dumped my beloved Netscape for the very same reason:

----------

Recently posted on another forum with many Firefox users.........

"Secunia Research.has discovered and reported that *Tabbed Browsing Vulnerabilities* exist in multiple browsers.

Vulnerability "A ":
It is possible for a inactive tab to spawn dialog boxes e.g. the JavaScript "Prompt" box or the "Download dialog" box, even if the user is browsing/viewing a completely different web site in another tab.

The problem is that the browsers do not indicate which tab launched the dialogue boxes, which therefore could lead the user into disclosing information to a malicious web site or to download and run a program, which the user thought came from another trusted web site e.g. their bank.

Vulnerability "B ":
It is possible for an inactive tab to always gain focus on a form field in the inactive tab, even if the user is browsing/viewing a completely different web site in another tab.

This is escalated a bit by the fact that most people do not look at the monitor while typing data into a form field, and therefore might send data to the site in the inactive tab, instead of the intended/viewed tab. "

Any advice & comments would be appreciated.........

 

James,

This vulnerability is fixed in Firefox 1.0 RC 1. See rough changelog for Firefox 1.0 RC1: http://www.mozilla.org/projects/firefox/qa/changelog-rc1.html

Look for Bug #124750

https://bugzilla.mozilla.org/show_bug.cgi?id=124750

Ramona

 

Woo Hoo! Thanks!

Great, Ramona. That puts me at ease, especially with Christmas upon us and "Papa" ready to get his grandkids' some goodies. Thanks.