[bobince]

At least being online means they can fix it quickly. (Until the next marketing update that adds a vulnerable script, natch.)

Back in the IE5 days they had similar bugs in res:// (DLL resource) pages, running in the then-highly-privileged My Computer Zone. Took years of reporting the same kind of crap before they finally deprivileged it.

New browser, new code base, new devs... all the old bugs are new again.