Comment 11 for bug 782972

Revision history for this message
Kees Cook (kees) wrote :

This should probably be something like "remotely-served or Browser-handled JavaScript should never be executed by the Desktop". Regardless, without some more specific examples of bad situations, this statement won't be complete.