Frank Hecker on the Mozilla Security Bugs Policy
Thursday May 9th, 2002
"I'll add my personal opinion that we (mozilla.org staff) have not been active enough in publicizing the current mozilla.org policy on security bugs and the email@example.com reporting mechanism. I'll take personal responsibility for that failure; among other things, I neglected to do enough follow-up announcements after we created the security policy originally.
"I've tried to highlight the security bug policy information in the public statement referenced above, and I'll also try to make sure that the firstname.lastname@example.org address and related information get highlighted in appropriate pages on the mozilla.org web site."
#4 Let's give credit where credit is due
Friday May 10th, 2002 7:58 AM
You are replying to this message
Let me clarify something: I personally had absolutely nothing to do with fixing the XMLHttpRequest security vulnerability (or any other Mozilla bug, for that matter). You should direct any praise to the Mozilla developers themselves, including in particular the various Netscape employees who participated in fixing the bug.