Re: webxml is broken on Firefox

[Brandon Enright <bmenrigh () ucsd edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 29 Jan 2010 21:05:18 +0100
Vlatko Kosturjak <kost () linux hr> wrote:

> Jon Kibler wrote:
> > When trying to open "foo.xml" in Firefox on Windows, Mac, or Linux
> > using Firefox 3.5.7 or 3.6, it rolls over and croaks with the error:
> > >    Error loading stylesheet: A network error occured loading
> > > an XSLT stylesheet: http://nmap.org/data/nmap.xsl
> >
> > I realize this is probably a Firefox problem, as the file opens ok
> > in IE or Safari, but any ideas for a work-around with Firefox?
>
> It is a Firefox security feature (no remote stylesheets).
> Take a look here:
> http://seclists.org/nmap-dev/2006/q3/46
>
> Kost


In looking through about:config in Firefox 3.5.6, I see
"security.fileuri.strict_origin_policy;true" which is discussed here:

http://kb.mozillazine.org/Security.fileuri.strict_origin_policy

That sounds like a way to defeat this security mechanism.  If it works
I'm sure others will be interested in it too.

Brandon

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (GNU/Linux)

iEYEARECAAYFAktjQpcACgkQqaGPzAsl94KnewCeO5hlgIM4gMKY/iOmjI7NqeYF
8JwAoKJmWzJXflYKQyrvOARDoYqDLDfT
=VMh2
-----END PGP SIGNATURE-----
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/