Kevin A. Burton wrote:
> What is that last junk in the directory:
>
> .mozilla/default/sjvbkel8.slt
>
> In previous builds it used to store it in just ./mozilla/PROFILE_NAME
>
> This is a problem because I know a lot of people, myself included, that keep our
> home directory dotfiles in CVS. Mozilla is now adding this magic directory at
> the end and it is breaking this.
>
> What is this for?
Many security problems with browsers have been based on the fact that an
attacker knows where to find the profile. To avoid this it was necessary
to include some random part in the profile path.
Search for "salt" in bugzilla.mozilla.org and you may find the relevant
bug. I think they mention some way to still use the old non-salted path
there.
/Daniel
