Doug Turner wrote:

> The basic deal is that some protocols should not be allowed to run on 
> some ports.  Without any checking someone could do all sorts of evil 
> things

What do you mean with "run"? Mozilla shouldn't accept any connections 
from outside. So, the "ports" can only refer to the server, the - I 
assume - potentially hostile side. But if I am hostile, I can let my 
server run on any port I want.

Or are you trying to protect third-party sites? E.g. I happend to visit 
hostile site A, which causes my browser to open a connection to victim 
site B?

Reply via email to