Dactyloidae/application/palemoon/app/profile
Moonchild d004b26d7f [Pale-Moon] Warn before using external handler for usenet protocols
We normally ask for confirmation before asking the operating system to
find an application to handle a scheme that the browser does not support.

It did not ask before doing so for the Usenet-related schemes news: snews:
and nntp:. Since most operating systems in 2024 don't have a trusted
newsreader installed by default, an unscrupulous program that the user
downloaded could register itself as a handler.
The website that served the application download could then launch that
application at will. Of course, all bets are off if a user runs such a
program to begin with, but in some situations (looking at you, MacOS!)
just downloading/unpacking could already result in registration as a
protocol handler without the user actually executing anything.
2024-09-22 20:50:49 +08:00
..
extensions [Pale-Moon] Nuke vim configuration lines from the front-end (no code changes) 2020-10-30 09:19:39 +08:00
channel-prefs.js Add Pale Moon 2018-02-02 03:35:06 -05:00
pagethemes.rdf Add Pale Moon 2018-02-02 03:35:06 -05:00
palemoon.js [Pale-Moon] Warn before using external handler for usenet protocols 2024-09-22 20:50:49 +08:00
prefs.js Add Pale Moon 2018-02-02 03:35:06 -05:00