We currently support URLs such as <jar:http://mxr.mozilla.org/mozilla-central/source/modules/libjar/test/mochitest/bug403331.zip?raw=1&ctype=application/java-archive!/test.html>. This is a Firefox specific feature that no other engine implements, and it increases our attack surface unnecessarily. As such, I would like to put it behind a pref and disable it for Web content by default.

Are there any objections?

Thanks!
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform

Reply via email to