Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Cuireadh an snáithe seo sa chartlann. Cuir ceist nua má tá cabhair uait.

Sensitive Data Breach; FF displays content from a previously loaded plugin when displaying new content from within another pugin

  • 4 fhreagra
  • 1 leis an bhfadhb seo
  • 2 views
  • Freagra is déanaí ó sroberts

sroberts
sroberts
more options

Sensitive Data Breach.

When loading content from a plugin, such a pdf or flash, any content from previously viewed content from a plugin is flash before the new content is displayed.

In our app we show sensitive information and this represents a data breach.

This issue present across or between the same or different plugins. Silverlight - > PDF, PDF -> PDF, etc.

Sensitive Data Breach. When loading content from a plugin, such a pdf or flash, any content from previously viewed content from a plugin is flash before the new content is displayed. In our app we show sensitive information and this represents a data breach. This issue present across or between the same or different plugins. Silverlight - > PDF, PDF -> PDF, etc.

Athraithe ag sroberts ar

All Replies (4)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

In reviewing the steps to re-create the problem, I'm not sure I understand what's happening. 


1. Load some flash content
2. Leave the Tab open or Close the tab
3. Load a pdf within the browser in another tab.

Note: Ensure Options -> Tabs -> "When I open a link in a new tab, switch to it immediately" is selected.

Note: Ensure you clear your cache so plugin content is downloaded.


The longer it takes to download the pdf the longer the sensitive data will be displayed. When the plugin fails content may be displayed indefinitely.

(I view PDFs outside the browser, so I haven't attempted to re-create the above scenario.)

Are you saying that Flash content appears where the PDF is supposed to load, or a previous PDF appears?

I assume this previously viewed data doesn't survive a shut-down and restart of Firefox. Is that correct?

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Make sure that you have the latest version of your graphics display driver.

sroberts
sroberts Úinéir na ceiste
more options

Hi jscher2000,

Yes, the content from the previously viewed plugin appears where the next plugin's content is supposed to display until the next plugins content fully loads.

Correct, previously viewed data doesn't survive a shut-down and restart of Firefox.

The content is NO-STORE.

sroberts
sroberts Úinéir na ceiste
more options

Hi cor-el,

Thank you, I followed each option - no luck.