sbeckeriv/aws-user-name-fixer — Issue #3: build dom objects the FF way
Author: sbeckeriv
Created: 2011-10-29 17:28:53+00:00
State: open

Your add-on creates DOM nodes from HTML strings containing unsanitized data, by assigning to innerHTML or through similar means. Aside from being inefficient, this is a major security risk. For more information, see https://developer.mozilla.org/en/XUL_School/DOM_Building_and_HTML_Insertion