Cross Context Scripting in Firefox Sage Extension.
http://www.gnucitizen.org/blog/cross...ting-with-sage

This proves that Firefox Extensions can be as dangerous as random
flash or quicktime media files. Moreover, the POC provides a real
example of how RSS feed Hacking really works.

--
pdp (architect)
http://www.gnucitizen.org