Firefox was updated to 18.104.22.168 recently, and I noticed that one of the eight patches is another URI handler fix. The 22.214.171.124 update also included a URI handler patch, when Mozilla rushed out that update after the first onslaught of protocol handler bugs. While the bugs are still a Microsoft problem, the Mozilla developers isolated cases when the Windows operating system would mishandle URIs and blocked them using their program, so users of Firefox won’t be affected by the vulnerable handlers. Ultimately, Microsoft needs to patch this on their end, but Mozilla’s taking steps to protect their users is something I applaud.
Mozilla Makes Another URI Handler Fix
This post was published 12 years 1 month 17 days ago. A number of changes have been made to the site since then, so please contact me if anything is broken or seems wrong.