On 2015-10-15 1:58 PM, Ehsan Akhgari wrote:
We currently support URLs such as <jar:http://mxr.mozilla.org/mozilla-central/source/modules/libjar/test/mochitest/bug403331.zip?raw=1&ctype=application/java-archive!/test.html>. This is a Firefox specific feature that no other engine implements, and it increases our attack surface unnecessarily. As such, I would like to put it behind a pref and disable it for Web content by default.
FWIW I filed bug 1215235 for this. We'll wait for this discussion before landing code there.
_______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
