on july 8th , the mozilla board released a configuration change which settles this problem by explicitly disabling the user of the shell : an external protocol handler .
A shell is an external protocol handler.