Update to a nightly build. Using the GreyMagic Mozilla Disk Explorer

and c't Browsercheck, I am no longer able to activate bug #141061
("XMLHttpRequest allows reading of local files").

In message <52D05AEFB0D95C4BAD179A054A54CDEB1BD37A@mailsrv1.jubii.dk>
on Bugtraq, Thor Larholm described a buffer overflow in Chatzilla.
I confirmed the bug with this version of Mozilla/Chatzilla.  Therefore
the chatzilla component is now omitted from batch builds and defaults
to being omitted from interactive ones too (XFree86 did crash
once--perhaps taken down by Mozilla--when I was viewing Thor's
demonstration page for the bug, but a second visit was uneventful).
I added a warning in capitals for interactive users.  I was unable
to reproduce the other bug reported by Thor in the same message.

3 files changed, 17 insertions, 30 deletions

diff --git a/www/linux-mozilla/Makefile b/www/linux-mozilla/Makefile
index 58e50e803e03..09604419cfab 100644
--- a/www/linux-mozilla/Makefile
+++ b/www/linux-mozilla/Makefile
@@ -7,11 +7,11 @@
 #
 
 PORTNAME=	mozilla
-PORTVERSION=	0.9.9
-PORTREVISION=	1
+PORTVERSION=	0.9.9.2002050810
 CATEGORIES=	www linux
 MASTER_SITES=	${MASTER_SITE_MOZILLA}
-MASTER_SITE_SUBDIR=	mozilla/releases/mozilla${PORTVERSION}/linux-xpi/
+MASTER_SITE_SUBDIR=	mozilla/nightly/2002-05-08-10-1.0.0/linux-xpi
+
 PKGNAMEPREFIX=	linux-
 DIST_SUBDIR=	linux-mozilla/${PORTVERSION}
 
@@ -21,8 +21,6 @@ PATCHFILES=	linux-mozilla-${PORTVERSION}-generated-files.tar.gz
 
 MAINTAINER=	trevor@FreeBSD.org
 
-FORBIDDEN=	"malicious Web servers can upload files--see http://sec.greymagic.com/adv/gm001-ns/ or http://www.heise.de/ct/browsercheck/n6demo1.shtml "
-
 BUILD_DEPENDS=	unzip:${PORTSDIR}/archivers/unzip
 RUN_DEPENDS=	${LINUXBASE}/usr/lib/libgtk-1.2.so.0.5.0:${PORTSDIR}/x11-toolkits/linux-gtk
 
@@ -49,7 +47,6 @@ pre-everything::
 	${SETENV} ${SCRIPTS_ENV} ${SH} ${SCRIPTDIR}/configure
 .endif
 DISTFILES=	browser.xpi \
-		chatzilla.xpi \
 		deflenus.xpi \
 		inspector.xpi \
 		langenus.xpi \
diff --git a/www/linux-mozilla/distinfo b/www/linux-mozilla/distinfo
index 04c4b6cfbbd7..6ca9f12d2a9e 100644
--- a/www/linux-mozilla/distinfo
+++ b/www/linux-mozilla/distinfo
@@ -1,23 +1,13 @@
-MD5 (linux-mozilla/0.9.9/browser.xpi) = 488cdf6999123ce61504f38a58a2ac66
-MD5 (linux-mozilla/0.9.9/browser.xpi) = c060f2a42b4decfb8ccc6a4b793d4206
-MD5 (linux-mozilla/0.9.9/chatzilla.xpi) = ae47c0bc18fbf83d10466b7afe26ede6
-MD5 (linux-mozilla/0.9.9/chatzilla.xpi) = f18487e6b5fd585270abe0fade85fa7b
-MD5 (linux-mozilla/0.9.9/deflenus.xpi) = 471b130e4ab32e93615d27c171774171
-MD5 (linux-mozilla/0.9.9/deflenus.xpi) = bada39d2dd054d3239c236953b95c052
-MD5 (linux-mozilla/0.9.9/inspector.xpi) = 4e0c8182a0c5f1d18cb2c0c870750b51
-MD5 (linux-mozilla/0.9.9/inspector.xpi) = 7f10643831fee55ab10ee427f54731d6
-MD5 (linux-mozilla/0.9.9/langenus.xpi) = caade90214ca34a3be447653086aec32
-MD5 (linux-mozilla/0.9.9/langenus.xpi) = ec321bb23c7cc16856ef766a4987db46
-MD5 (linux-mozilla/0.9.9/linux-mozilla-0.9.9-generated-files.tar.gz) = 4fc39a18276c72269634a5ae2e5106c6
-MD5 (linux-mozilla/0.9.9/mail.xpi) = 1a19ad81254c36cf910c1750a5cc72fa
-MD5 (linux-mozilla/0.9.9/mail.xpi) = 8c7a86aef62451e29bb0e7e1f3ec2512
-MD5 (linux-mozilla/0.9.9/psm.xpi) = 342c6934fccaeb18d1ae2aee20457804
-MD5 (linux-mozilla/0.9.9/psm.xpi) = 3b4ac539c698d348ae909bd54fbc11b1
-MD5 (linux-mozilla/0.9.9/regus.xpi) = b9da15fe15adb8f24a2854f413597026
-MD5 (linux-mozilla/0.9.9/regus.xpi) = df6fe5150d50ea0f9dce4157abf9496e
-MD5 (linux-mozilla/0.9.9/talkback.xpi) = 96ed14f2ed4a43d694ee59765c74cad9
-MD5 (linux-mozilla/0.9.9/talkback.xpi) = c48e963c3b8e3a857b427ffc01edef0f
-MD5 (linux-mozilla/0.9.9/venkman.xpi) = 81c193575a12b019e4bbaeade3782825
-MD5 (linux-mozilla/0.9.9/venkman.xpi) = e276c552be88735393225ea950b96f3b
-MD5 (linux-mozilla/0.9.9/xpcom.xpi) = 6becc5eec2b18945c349b05a6987f198
-MD5 (linux-mozilla/0.9.9/xpcom.xpi) = 7e905519212e010dac6b7afa599804cd
+MD5 (linux-mozilla/0.9.9.2002050810/browser.xpi) = e23ac79e083e6c9b3ea3d58191a7ef7d
+MD5 (linux-mozilla/0.9.9.2002050810/langenus.xpi) = d0a38737967e44f14af88359bea4c424
+MD5 (linux-mozilla/0.9.9.2002050810/regus.xpi) = e2a9f6ef783555979ca1b4a98d50cc95
+MD5 (linux-mozilla/0.9.9.2002050810/venkman.xpi) = 3fda2f90fca4e6acd9aaf300ed053536
+MD5 (linux-mozilla/0.9.9.2002050810/xpcom.xpi) = 7cf508f187d9a43ad783a96ad476e05f
+MD5 (linux-mozilla/0.9.9.2002050810/chatzilla.xpi) = 68c859de0f0067b4723947ca90350a06
+MD5 (linux-mozilla/0.9.9.2002050810/deflenus.xpi) = 826f84250ed40ea98d192c83e4f783c3
+MD5 (linux-mozilla/0.9.9.2002050810/inspector.xpi) = 830146e23da8029d0680126fe7ba675d
+MD5 (linux-mozilla/0.9.9.2002050810/mail.xpi) = 3487e7678bb67f5d31695800a3737faf
+MD5 (linux-mozilla/0.9.9.2002050810/psm.xpi) = 9b76b5b5c37ca911378c551db4805033
+MD5 (linux-mozilla/0.9.9.2002050810/talkback.xpi) = c18c22a30456b4cde49b934b7a250b76
+MD5 (linux-mozilla/0.9.9.2002050810/venkman.xpi) = 3fda2f90fca4e6acd9aaf300ed053536
+MD5 (linux-mozilla/0.9.9.2002050810/linux-mozilla-0.9.9.2002050810-generated-files.tar.gz) = 34ddae7fc59e3fa9d55a04f83ccbf165
diff --git a/www/linux-mozilla/scripts/configure b/www/linux-mozilla/scripts/configure
index e37f503e85c4..a2989a552c02 100644
--- a/www/linux-mozilla/scripts/configure
+++ b/www/linux-mozilla/scripts/configure
@@ -15,7 +15,7 @@ echo "browser langenus regus venkman xpcom" > /tmp/checklist.tmp.$$;
 	--checklist "\n\
 Choose which components of Mozilla to download and install. \n\
 Press the space bar to toggle selections." -1 -1 7 \
-"chatzilla"	"IRC client (102 kB)"					ON \
+"chatzilla"	"IRC client (102 kB) DO NOT USE:  HAS SECURITY BUG!"	OFF \
 "deflenus"	"American English profile defaults (8 kB)"		ON \
 "inspector"	"DOM inspector (240 kB)"				ON \
 "mail"		"Mozilla Mail and News (1728 kB)"			ON \