Mozilla Privacy Bug
Saturday September 14th, 2002
Yesterday, ZDNet UK News reported that Mozilla has a privacy flaw involving HTTP referers. The flaw can be exploited using the
The bug was filed in Bugzilla as bug 145579 on Sunday 19th May, with the more serious
UPDATE! Bug 145579 has now been made public.
ANOTHER UPDATE! A fix has been checked in to the trunk. A patch for the 1.0 branch will follow shortly.
YET ANOTHER UPDATE! A patch has now been checked in to the 1.0 branch.
#55 Re: Fix is in
Wednesday September 18th, 2002 9:40 AM
You are replying to this message
Well, it's very good that they have fixed it. However, if the developers had fixed it as soon as it was reported, they would have saved themselves a lot of embarrasment. Now as it stands there are a lot of unpatched browsers still out there, and mozilla's image has been tarnished. Don't get me wrong, I love using mozilla, and I'm sure there are good reasons why it took four months to patch. But at the very least, the mozilla team should be reviewing their procedures for fixing security bugs to make sure something like this doesn't happen again.