[Project_owners] how does the shellblock.xpi work for FireFox?

Charles Melhorn melodious at mindspring.com
Sat Jul 10 13:06:02 EDT 2004


The patch for the 'shell:' protocol handling vulnerability,
(see http://www.mozilla.org/security/shell.html )
shellblock.xpi, contains two files: bug250180.js, which
disables the preference related to this problem, and
install.js, which seemingly adds the first file to the
"defaults/pref" folder.

I thought, however, that for FireFox 0.9.x the "install.js"
file was ignored by the Extension Manager, per the
documentation found here:

http://www.bengoodger.com/software/mb/extensions/packaging/extensions.html

    "install.js scripts are no longer used for Firefox and
    Thunderbird extensions. If you provide an install.js script,
    it will not be read|.|"

Clearly, though, the install script was not ignored, as the
new preference file was placed in the appropriate folder
upon installation in FireFox. Has the install.js functionality
been retained after all? Can someone point me to updated
documentation or discussion of this?

Thanks,

Charles





More information about the Project_owners mailing list