MozillaZine

Mozilla 1.6 ActiveX Control Installer and Scriptable ActiveX Plugin for Mozilla 1.6 Released

Tuesday January 20th, 2004

Adam Lock writes: "Following in the wake of Mozilla 1.6, I'm happy to announce the release of the new standalone Mozilla 1.6 ActiveX Control installer and the Scriptable ActiveX Plugin for Mozilla 1.6. Both are available from my website.

"New features for the control include support for view-source: and data: protocols, plus it ships with the ActiveX plugin so it is possible to host ActiveX content from inside the control. The installer is slightly smaller (4.5Mb) thanks to bzip2 compression.

"There are no new features in the plugin but Mozilla 1.6 is unencumbered by the regression that disabled scripting support in 1.5."


#11 Re: Re: I'll rather pass, and so should other peop

by bugs4hj <bugs4hj@netscape.net>

Thursday January 22nd, 2004 9:12 AM

You are replying to this message

"A hacker would find it much easier to ship a malacious .xpi or plugin. How hard would it be to write an extension that replaced a DLL, installed a backdoor or submited the wallet data to an #irc channel? Not hard at all. What's more, the Firebird Extension site makes it simple to submit the extension and put it within easy reach of hundreds of thousands of people."

True, that would be very easy...

"I'm surprised a malacious extension hasn't appeared actually. I'm sure there will be a big flap when it does too."

I believe none of the mozdev.org developers will ever do that, but we can't be sure of that, and not every project is hosted on mozdev.org. Thanks God for that. I think this might become a bigger problem when more people start using mozilla as their browser of choice.

Again, this is something we should start worry about now, not when it's already to late...

Thanks for sharing your point of view. We're off topic but this is very important.

/HJ