Firefox Blocks Inline and Eval JavaScript on Internal Pages to Prevent Injection Attacks


firefox browser javascript injection attacks

In an effort to mitigate a large class of potential cross-site scripting issues in Firefox, Mozilla has blocked execution of all inline scripts and potentially dangerous eval-like functions for built-in “about: pages” that are the gateway to sensitive preferences, settings, and statics of the browser.

Read more…