petea/sage — Issue #27: Malicious URI vulnerability
Author: petea
Created: 2011-11-21 06:37:59+00:00
State: open
Labels: imported

Using the javascript or data scheme, it's possible to present a link to the user
that, when clicked, executes javascript in the chrome security context.

Original bug report:

https://www.mozdev.org/bugs/show_bug.cgi?id=20610

Original link: http://code.google.com/p/sage/issues/detail?id=2