Dobry den,
diky za upresneni. Spravne jsou obe varianty, viz citace ze Secunie: "This can e.g. be exploited to disclose the full installation path by calling the "window.sidebar.addSearchEngine()" JavaScript function with invalid parameters.
This may reportedly also be exploited to disclose the full path to the user's profile via errors thrown in installed extensions."
Názor k článku
Bezpečnost v uplynulém týdnu: zranitelnosti Firefoxu a Drupalu
