Yup. Here it is now, done up with a spoofing example:
http://zesty.ca/popup/
I've reported this as bug 284551.
Thanks :-)
Gerv _______________________________________________ Mozilla-security mailing list Mozilla-security@mozilla.org http://mail.mozilla.org/listinfo/mozilla-security