LWN.net Logo

Firefox locks down the components directory

Firefox locks down the components directory

Posted Nov 28, 2009 6:53 UTC (Sat) by njs (guest, #40338)
In reply to: Firefox locks down the components directory by bangert
Parent article: Firefox locks down the components directory

Sure, but IIUC chrome privileges *mean* you can do anything firefox can do, e.g. write to arbitrary files; turning this into a full-blown binary code injection is easy. JSCtypes doesn't sound like it lets you do anything you couldn't do before if you really wanted to and didn't care how much wreckage you left in your wake; it just makes it easier and supported.


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds