4 ms·

I can agree that FTP isn't much a attack vector, but definitely against for XUL.

• antisol 5y ago
  How many in-the-wild attacks did you see using XUL from extensions that were in the curated addons ecosystem, i.e not downloaded and manually installed via extra steps a novice is unlikely to go through?
  • fomine3 5y ago
    XUL allows too many modification for browser. It increases attack surface, and it makes hard Firefox developer to modify Firefox's internals to improve things.
    • antisol 5y ago
      you didn't answer my question. I asked how many times you saw this exploited in the wild, not "how would an attack theoretically work".
      • antisol 5y ago
        Yeah, that's what I thought.