Re: EEYE: Temporary workaround for IE createTextRange vulnerab

[Valdis.Kletnieks () vt edu]

On Tue, 28 Mar 2006 15:21:47 +1200, Jasper Bryant-Greene said:

> One assumes that if the user is smart enough to type about:config, they 
> are smart enough to know where to look to find the meaning of the config 
> options.

Good.  I know all about about:config.  So where is the documentation of
network.cookie.lifetimePolicy? 

The top Google hits:

http://kb.mozillazine.org/Network.cookie.lifetimePolicy
http://mozilla.gunnars.net/firefox_help_firefox_cookie_tutorial.html
http://www.mozilla.org/projects/netlib/cookies/cookie-prefs.html

Which of these are authoritative and refer to *your* release of Firefox?
(hint - one of them references a Mozilla 1.7 bugzilla entry..).  Oh, and
the about:config doesn't show any help, and the onboard Help that ships
with Deer Park doesn't seem to mention about:config at all...

And anybody who starts off with "one assumes that if the user is smart enough"
hasn't ever worked in User Support.  First off, the user may be smart enough
to *think* he knows what it means.  And the user may in fact be smart enough
to know what it means.

But the user is *sure* *as* *hell* not smart enough to figure out that the
change hosed up the setting of cookies, and that's why his printouts are now
ending up on the wrong building.  (And yes, there's applications that do
crap like that.  Deal with it. Or get a new job. :)

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/