[tor-talk] Security issue. Firefox in Tor Browser Bundle allows access to LAN resources. To fix: ABE of NoScript must be turn on by default

[Yuri]

On 01/21/2014 01:01, Olivier Cornu wrote:
> Fwiw, I can confirm this unfortunate behavior.:(
> TBB connecting to loopback netcat socket from tortestprivacy.url.ph
> javascript:

This is very troubling. I also confirm, though behavior with nc and with 
apache listeners differ for some reason.
I created a PR: https://bugzilla.mozilla.org/show_bug.cgi?id=962017

Yuri