**2008-10-15 Update:** Unfortunately, it looks like MSIE 6, and possibly others, do not reliably set the HTTP_ACCEPT header to reflect the content type being requested. Often MSIE will send a \*/\*. So at the present moment it's not clear to me how one can recognize a request on the server which resulted fro ... Read Full Article

There has been a drastic increase in Cross Site Scripting (XSS) attacks of late. Here's an excellent article by CERT on how you can avoid them: [http://www.cert.org/tech\_tips/malicious\_code_mitigation.html][1] More information on XSS attacks can be found here: Read Full Article

As reported on Slashdot.org: *"Perhaps many, who viewed [Zimbra presentation from yesterday][1], thought about other office-related applications they would like to see moved to the Web. Richard McManus on ZDNet [provides a list of the currently available AJAX apps][2]. Did you know there was [AJAX word proces ... Read Full Article

Heads up, [FireFox 1.0.7][1] is available which fixes some serious security issues. [1]: http://www.mozilla.org ... Read Full Article

Several major vulnerabilities have been found in FireFox 1.0.4. [Upgrade to 1.0.5.][1] [1]: http://www.mozilla.org/products/firefox/releases/1.0.5.html ... Read Full Article

Check it out: [dragList StandAlone 0.5][1] - Javascript drag and drop ordered lists. [1]: http://freshmeat.net/projects/draglist/?branch_id=58404&release_id=197354 ... Read Full Article

From slashdot: *"[News sources][1] are reporting that a 'killer' new Firefox exploit has been revealed today by [FrSIRT ][2]who warn that this 0day [exploit/vulnerability][3] (as yet unpatched) should be rated as critical. Summery of the exploit: If a user clicks anywhere on a specially crafted page, this cod ... Read Full Article

James Sleeman of [GoGo Code][1] has forked the HTMLArea project to produce [Xinha][2] (pronounced Xena :) ) which stands for Xinha is not HtmlArea. As soon as the next version is stable the formVista and MOBIE code bases will be switching from this POS HTMLArea editor to Xinha. FYI, James is a very accomplis ... Read Full Article

using/setup mozilla or firefox to cut & paste articles to the www.yml.com website Setting Prefs for the Mozilla Rich Text Editing Demo To protect users' private information, unprivileged scripts cannot invoke the Cut, Copy, and Paste commands in the Mozilla rich text editor, so the corresponding buttons on the ... Read Full Article

For web application developers, I came across an extremely cool extension for FireFox called [WebDeveloper.][1] This extension adds a new button bar in FireFox with a number of tools including: * a web form inspector (no more endless printing out POST and GET * variables from your server side code, let Fire ... Read Full Article

Instead of editing the "prefs.js", Firefox has a built in preferences editor. Just enter "about:config" in the urlbar. That will present you with a UI to edit the values of prefs.js. ... Read Full Article

As I've seen with a number of apps, if you don't have xft support fonts looks like crap under Mozilla and Firefox. Under RedHat 9, to get decent looking fonts on my particular LCD monitor setup (SAMSUNG SyncMaster 192T) I compiled firefox from source. They use this .mozconfig setup so instead of adding options to ... Read Full Article

This one took a bit to figure out. It looks like firefox and mozilla share the same source tree. If you just do the normal configure, make you'll get errors like ../../toolkit/locales/en-US/chrome/necko/contents.rdf' doesn't exist after quite a bit of compiling. Some sites suggest doing a LANGUAS=en prior t ... Read Full Article