Local files or privileged URLs in pages can be opened into new tabs

2015-02-24T00:00:00
ID MFSA2015-25
Type mozilla
Reporter Mozilla Foundation
Modified 2015-02-24T00:00:00

Description

Security researcher Armin Razmdjou reported that opening hyperlinks on a page with the mouse and specific keyboard key combinations could allow a Chrome privileged URL to be opened without context restrictions being preserved. This could also allow for local files or resources from a known location to be opened with local privileges, bypassing security protections.