3 ms·
Mozilla is probably unable to disclose not just the vulnerability, but other surrounding info they may have been provided, including which other parties have re
by Jare 10y ago
Mozilla is probably unable to disclose not just the vulnerability, but other surrounding info they may have been provided, including which other parties have received that info. They are not saying the Angular team is unaware of the problem, right? Only that they themselves are not the ones reporting it.
If you don't honor such request without a VERY STRONG reason, nobody in their right mind will ever disclose anything to you ever again. Right now we don't and can't know if such a strong reason exists.
- moron4hire 10y ago"They are not saying the Angular team is unaware of the problem, right?" Are we just going to assume the folks at Mozilla are clairvoyants? How would they know what the Angular team knows? If it's known in general that the Angular team knows about this issue already, perhaps through other means, then the statement that they haven't disclosed this to the Angular team makes no sense. The statement is, "Mozilla is choosing to do it's part to keep Angular in the dark about this."
- TheRealPomax 10y agoWell, there's https://github.com/mozilla/addons-linter/issues/1000#issuecomment-255183470 https://github.com/mozilla/addons-linter/issues/1000#issueco... ...
- Jare 10y agoAnd now one of the researcher has commented https://github.com/mozilla/addons-linter/issues/1000#issuecomment-256183820 https://github.com/mozilla/addons-linter/issues/1000#issueco...