<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: 2005-08-17 Branch builds</title>
	<atom:link href="http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/</link>
	<description>Developments in nightly builds of Mozilla Firefox</description>
	<pubDate>Fri, 21 Nov 2008 14:39:22 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5</generator>
		<item>
		<title>By: Sohail Mirza</title>
		<link>http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/#comment-2525</link>
		<dc:creator>Sohail Mirza</dc:creator>
		<pubDate>Thu, 18 Aug 2005 22:05:06 +0000</pubDate>
		<guid isPermaLink="false">http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/#comment-2525</guid>
		<description>I just noticed that Deer Park does not allow a frame's src attribute to invoke a javascript function any longer.  The simplified test case below works in Firefox 1.0.6 but not Deer Park 08-17 nightly:

&lt;code&gt;
&#60;html&#62;
&#60;head&#62;
&#60;script type="text/javascript"&#62;
function fooBar() { return "Hello World"; }
&#60;/script&#62;
&#60;frameset rows="50%,50%"&#62;
&#60;frame name="topFrame" src="javascript:parent.fooBar();"&#62;
&#60;frame name="bottomFrame" src="http://www.mozilla.org"&#62;
&#60;/frameset&#62;
&#60;/html&#62;
&lt;/code&gt;

Is this a regression, or is calling a javascript function in a frame's src attribute considered a XSS vulnerability?</description>
		<content:encoded><![CDATA[<p>I just noticed that Deer Park does not allow a frame&#8217;s src attribute to invoke a javascript function any longer.  The simplified test case below works in Firefox 1.0.6 but not Deer Park 08-17 nightly:</p>
<p><code><br />
&lt;html&gt;<br />
&lt;head&gt;<br />
&lt;script type=&#8221;text/javascript&#8221;&gt;<br />
function fooBar() { return &#8220;Hello World&#8221;; }<br />
&lt;/script&gt;<br />
&lt;frameset rows=&#8221;50%,50%&#8221;&gt;<br />
&lt;frame name=&#8221;topFrame&#8221; src=&#8221;javascript:parent.fooBar();&#8221;&gt;<br />
&lt;frame name=&#8221;bottomFrame&#8221; src=&#8221;http://www.mozilla.org&#8221;&gt;<br />
&lt;/frameset&gt;<br />
&lt;/html&gt;<br />
</code></p>
<p>Is this a regression, or is calling a javascript function in a frame&#8217;s src attribute considered a XSS vulnerability?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Manoj Mehta</title>
		<link>http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/#comment-2524</link>
		<dc:creator>Manoj Mehta</dc:creator>
		<pubDate>Thu, 18 Aug 2005 20:33:48 +0000</pubDate>
		<guid isPermaLink="false">http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/#comment-2524</guid>
		<description>I am using the default theme with a new profile and EM doesn't have a scrollbar. I'll nuke my installation/profile and try again.</description>
		<content:encoded><![CDATA[<p>I am using the default theme with a new profile and EM doesn&#8217;t have a scrollbar. I&#8217;ll nuke my installation/profile and try again.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: CooLynX</title>
		<link>http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/#comment-2523</link>
		<dc:creator>CooLynX</dc:creator>
		<pubDate>Thu, 18 Aug 2005 14:10:41 +0000</pubDate>
		<guid isPermaLink="false">http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/#comment-2523</guid>
		<description>Sorry, there is a scrollbar in extension window using default theme! My fault. :P</description>
		<content:encoded><![CDATA[<p>Sorry, there is a scrollbar in extension window using default theme! My fault. :P</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Moktoipas</title>
		<link>http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/#comment-2522</link>
		<dc:creator>Moktoipas</dc:creator>
		<pubDate>Thu, 18 Aug 2005 12:24:57 +0000</pubDate>
		<guid isPermaLink="false">http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/#comment-2522</guid>
		<description>I tested some themes and with all of them i don't have any scrollbar.

But with the default theme they appears nomaly even in the extensions window.</description>
		<content:encoded><![CDATA[<p>I tested some themes and with all of them i don&#8217;t have any scrollbar.</p>
<p>But with the default theme they appears nomaly even in the extensions window.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: CooLynX</title>
		<link>http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/#comment-2521</link>
		<dc:creator>CooLynX</dc:creator>
		<pubDate>Thu, 18 Aug 2005 09:37:50 +0000</pubDate>
		<guid isPermaLink="false">http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/#comment-2521</guid>
		<description>I'm using Opera 7.5x theme 1.1.050514 and in this theme there ar no scrollbars at all. :( Using default theme scrollbars are missing only in extensions window.</description>
		<content:encoded><![CDATA[<p>I&#8217;m using Opera 7.5x theme 1.1.050514 and in this theme there ar no scrollbars at all. :( Using default theme scrollbars are missing only in extensions window.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: pika unforgiven</title>
		<link>http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/#comment-2520</link>
		<dc:creator>pika unforgiven</dc:creator>
		<pubDate>Thu, 18 Aug 2005 08:46:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.squarefree.com/burningedge/2005/08/17/2005-08-17-branch-builds/#comment-2520</guid>
		<description>EM scrollbar WFM on Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b4) Gecko/20050817 Firefox/1.0+ ID:2005081719

normally i would use trunk builds but im stuck using branch builds thanks to this bug:
&lt;a href="https://bugzilla.mozilla.org/show_bug.cgi?id=304874" rel="nofollow"&gt;#304874&lt;/a&gt; - [Firefox]-Extensions no longer work in trunk builds [Win]

not that it really matters that much tho, currently most "unstable" things are checked into the trunk, then checked into the branch builds once found stable, but i really like being on the "bleeding edge" when it comes to firefox....</description>
		<content:encoded><![CDATA[<p>EM scrollbar WFM on Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b4) Gecko/20050817 Firefox/1.0+ ID:2005081719</p>
<p>normally i would use trunk builds but im stuck using branch builds thanks to this bug:<br />
<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=304874" rel="nofollow">#304874</a> - [Firefox]-Extensions no longer work in trunk builds [Win]</p>
<p>not that it really matters that much tho, currently most &#8220;unstable&#8221; things are checked into the trunk, then checked into the branch builds once found stable, but i really like being on the &#8220;bleeding edge&#8221; when it comes to firefox&#8230;.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
