Confirmed users
2,615
edits
User:Dmose:Protocol Handler Security Review: Difference between revisions
User:Dmose:Protocol Handler Security Review (view source)
Revision as of 23:35, 2 November 2007
, 2 November 2007→Security and Privacy
| Line 71: | Line 71: | ||
** Misc | ** Misc | ||
*** figure out what URI schemes are acceptable for both source and target | *** figure out what URI schemes are acceptable for both source and target | ||
*** notification bar for handler registration insufficiently clear; filed {{bug|402245}} | |||
*** details and editing of handler info not available from prefs UI; filed {{bug|402252}} | |||
*** web-based protocol handler "already been added" UI could use some tuning; filed {{bug|402258}} | |||
*** a rogue site could trick a user into registering a handler that would go to a large mail site (e.g. Yahoo mail) but via a redirector that could then sniff all requests; filed {{bug|402287}} | |||
== Exported APIs == | == Exported APIs == | ||