We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12.
Reserved 2025-06-20 | Published 2025-06-24 | Updated 2025-06-24 | Assigner mozillaContent-Disposition header ignored when a file is included in an embed or object tag
Daniil Satyaev (Positive Technologies)
bugzilla.mozilla.org/show_bug.cgi?id=1971140
www.mozilla.org/security/advisories/mfsa2025-51/
www.mozilla.org/security/advisories/mfsa2025-53/
Support options
