And it isnt a typo.
http://www.infoworld.com/article/07/07/11/blame-for-browser-bug_1.html?source=NLC-TB&cgd=2007-07-11
I still dont see this as an IE bug. Sure, the code is run from IE, but it exploits Firefox(etc). So therefore its a Firefox issue?
IE should check it properly, it doesnt, so the actual start bug is in IE even though it exploits Firefox. Really the exploit is in handing over as Firefox in itself isnt subject to the issue.
Of course, if someone were to be really nasty they might suggest that the IE team left it open in order for this problem to happen.
Old thread, but still . . .
http://www.theregister.co.uk/2007/07/25/firefox_url_bug/