on july 8th , the firefox staff released a configured correction which resolves this problem by explicitly disabling the use of the shell : an external message handler .
A shell is an external protocol handler.