[LINK] RFI: Firefox 3.5/3.6

[Scott Howard]

On Thu, Mar 25, 2010 at 4:57 PM, Roger Clarke <Roger.Clarke at xamax.com.au>wrote:

> 3.  Cross-Site Scripting
>
> Firefox 3.6 is, as I'd speculated, highly marketer-friendly and
> consumer-unfriendly in relation to 'cross-site scripting' (which
> refers to the practice of sites that you visit inviting lots of
> 'strategic partners' to invade your browser).
>

No, that is NOT what Cross-Site Scripting (XSS) is at all.
http://en.wikipedia.org/wiki/Cross-site_scripting will give you a good into
to what XSS is.

If you have any specific instances of where FF >3.0 is more susceptible to
XSS attacks than FF 3.0, then I'm sure the Firefox team would be happy to
hear them.

  Scott.