Saturday, July 31, 2004 - Posts

Security Advisor for Mozilla Browsers

Mozilla (and expecially Firefox) are becoming widespread browsers and the first security alerts are coming out...

Secunia has released a security advisor for a new Mozilla / Mozilla Firefox User Interface Spoofing Vulnerability.

The problem is that Mozilla and Mozilla Firefox don't restrict websites from including arbitrary, remote XUL (XML User Interface Language) files (the Mozilla user interface is built using XUL files). This can be exploited to "hijack" most of the user interface (including toolbars, SSL certificate dialogs, address bar and more), thereby controlling almost anything the user sees.

Solutions to this? For the moment only one... do not follow links from untrusted sites!

Main and accessibility...

I want to take in evidence an interesting question launched by Adrian Florea on UgiDotNet: what's the reasons to have a Main method not public???

Adrian points the attention to the differences between the last specifications of Java and C#:

C# Language Specification, 2nd editionJava Language Specification, 2nd edition
10.1
"Specifically, the execution environment can access the application’s entry point regardless of its declared accessibility and regardless of the declared accessibility of its enclosing type declarations."
12.1.4
"The method main must be declared public, static, and void. It must accept a single argument that is an array of strings"

Any explanations? Thanks Adrian for the question...