Mozilla Foundation Security Advisory 2006-75
RSS Feed-preview referrer leak
- Announced
- December 19, 2006
- Reporter
- Jared Breland
- Impact
- Low
- Products
- Firefox
- Fixed in
-
- Firefox 2.0.0.1
Description
Jared Breland reported on LEGROOM.net that when the new "Feed Preview" feature in Firefox 2.0 retrieves the icons of the installed web-based feed viewers it is potentially informing those services of your feed-browsing habits by sending the URL of the feed in a referrer header with each icon request.
This was an oversight and has been fixed in Firefox 2.0.0.1
Workaround
Upgrade to Firefox 2.0.0.1