This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.

Bug 27407 - REC HTML5, section 2.1.5, Plugins, in the warning. clarification
Summary: REC HTML5, section 2.1.5, Plugins, in the warning. clarification
Status: RESOLVED FIXED
Alias: None
Product: HTML WG
Classification: Unclassified
Component: HTML5 spec (show other bugs)
Version: unspecified
Hardware: PC Linux
: P2 editorial
Target Milestone: ---
Assignee: This bug has no owner yet - up for the taking
QA Contact: HTML WG Bugzilla archive list
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-11-22 07:49 UTC by Stefan Schumacher
Modified: 2016-04-21 20:40 UTC (History)
4 users (show)

See Also:

Attachments

Description Stefan Schumacher 2014-11-22 07:49:53 UTC 
Now:
When third-party software is run with the same privileges as the user agent itself, vulnerabilities in the third-party software become as dangerous as those in the user agent.

Suggestion:
When third-party software is run with the same privileges as the user agent itself, vulnerabilities in the third-party software become as dangerous as if they were vulnerabilities of the user agent itself.

Comment:
At the moment it sounds like there are vulnerabilities in the user agent by default.
Comment 1 Arron Eicholz 2016-04-21 20:40:55 UTC 
HTML5.1 Bugzilla Bug Triage: Fixed, updated per suggestion.

https://github.com/w3c/html/pull/238