-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Brian King wrote:
> Mozdev has been around since 2000 and this seems like the best group of
> all to ask for contributions. So if you have any stories that you think
> would fit, I'd love to hear them.

I have a strange thing.

In a quickie, I created a function outside of my singleton component. This 
function was called
getCharPref(), and itwas defined like function getCharPref(blah,blah) {blah 
blah}.

Problem: Some OTHER extension was calling it. Why? I guess it had it's own 
getCharPref, but for some
reason MINE was being called. Was I overloading a global getCharPref? Should 
that even be possible?
No idea. But it's definitely interesting. I could hijack other extensions with 
a perfectly "safe"
extension. Gross. (re-tested with latest firefox).

- --
Arturo "Buanzo" Busleiman
Independent Linux and Security Consultant - SANS - OISSG - OWASP
http://www.buanzo.com.ar/pro/eng.html
Mailing List Archives at http://archiver.mailfighter.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIzSZIAlpOsGhXcE0RCj2iAJ9vAGL70/YYoo5OIYnf1Ju7NCWSGQCeNemt
NCMcUNJJnfPEnUpgGsu69eA=
=2xE8
-----END PGP SIGNATURE-----
_______________________________________________
Project_owners mailing list
[email protected]
https://www.mozdev.org/mailman/listinfo/project_owners

Reply via email to