Re: Bug? Information disclosure

On Mon, Oct 20, 2008 at 6:23 PM, HJ van Rantwijk, MultiZilla
<[email protected]> wrote:
> Paul Hartman wrote:
>>
>> Open a website in a tab, then press control-B to open bookmarks and
>> double-click a bookmark to visit the site in the existing active tab.
>> The URL of the existing page will be sent to the bookmarked site as
>> the referrer. This could be potentially embarrassing or politically
>> dangerous. :P
>>
>> Is it a MultiZilla bug or seamonkey? I reported a very similar bug in
>> MultiZilla a few years ago, which HJ fixed immediately, so I suspect
>> it's maybe happening again in MultiZilla somewhere.
>>
>> I'm using:
>> Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.1.17) Gecko/20080924
>> MultiZilla/1.8.3.5i SeaMonkey/1.1.12
>>
>> Thanks,
>> Paul
>
> Paul,
>
> First, disable MultiZilla and try to reproduce the bug.
> BTW how are you testing this?

Okay, here's my results:

Installed extensions: MultiZilla, Adblock Plus, Flashblock

Any combination of the three where MultiZilla is enabled results in
the referrer being sent from the places I mentioned.

Any combination where MultiZilla is disabled results in no referrer
being sent from bookmarks, the expected behavior.

So, from here it seems to be happening only when MultiZilla is
present. Please let me know if you need any more info. Thanks! :)

Thanks,
Paul