have high hopes

I have high hopes for this research done by Gareth Heyes. It looks pretty bad what happens here. It is allowed to spoof different types of window attributes or objects, but also to abuse them cause interesting behaviorism in Firefox. Gareth showed me more, and I think this is going to turn out pretty bad, because it implies that you override almost anything that was set. But, Gareth also told me that he wasn't able to overwrite the document.location object. if that was the issue we could break the same origin policy and that would be one of the biggest vulnerabilities in Firefox so far.  read more »