GreyMagic Security Advisory: Reading Local Files in Netscape 6 and Mozilla

Describes how Mozilla's version of XMLHTTP, the XMLHttpRequest object, allows reading of arbitrary local files. Includes a demonstration of the exploit. (No longer an active bug in new versions of Mozilla)