On Thu, Oct 15, 2015 at 10:58 AM, Ehsan Akhgari <ehsan.akhg...@gmail.com> wrote:
> We currently support URLs such as <jar: > http://mxr.mozilla.org/mozilla-central/source/modules/libjar/test/mochitest/bug403331.zip?raw=1&ctype=application/java-archive!/test.html>. > This is a Firefox specific feature that no other engine implements, and it > increases our attack surface unnecessarily. As such, I would like to put > it behind a pref and disable it for Web content by default. > I've always been surprised by this (and resource:, although I think there's a story behind that one). Glad to see it go. Nick _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
