[ Thanks to Grok
for this link. ]
“There has been much happy publicity about the recent
XMLHttpRequest allows reading of local files security problem that
was reported by GreyMagic Software. The problem was reported on
April 30th and affected almost every version of Mozilla and NS6.x
currently in use. By May 1st, the trunk and 1.0 branch builds had
the patch included and were no longer vulnerable. Mozilla’s
security record speaks for itself, with only a handful of problems
reported to IE’s uncountable onslaught of problems, some of the IE
patches taking over a month to be released…”