Download Firefox

Firefox is no longer supported on Windows 8.1 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox is no longer supported on macOS 10.14 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox Privacy Notice

Mozilla Foundation Security Advisory 2015-103

URL spoofing in reader mode

Announced
September 22, 2015
Reporter
Juho Nurminen
Impact
Low
Products
Firefox, SeaMonkey
Fixed in
  • Firefox 41
  • SeaMonkey 2.38

Description

Security researcher Juho Nurminen reported a mechanism to spoof the URL displayed in the addressbar in reader mode by manipulating the loaded URL. This flaw allows for the URL displayed to be different than that the web content rendered. This allows for potential spoofing but the effects are mitigated due to the restrictions reader mode places when rendering content.

References