Mozilla Forefox jar: URL crossite scripting

It's possible to fire crossite scripting attack via jar: protocol by uploading JAR, DOC, ZIP, etc files...