If you want to install Wizz RSS 4.0.1.0 on Firefox 6.0, you can do so by clicking this link: – http://blat.co.za/XPIs/wizzrss4010.xpi

If you have “purchased” a nag free version of Wizz RSS, by making a donation, you can get the nag free version here http://www.wizzrss.com/dlnn.php

WARNING: I have done very superficial testing of 4.0.1.0 on Firefox 5.0 (I installed 5.0b7, but it updated itself, and now I have no idea what version I actually tested with, because Mozilla, in their infinite wisdom, only show 5.0 on the about Firefox page. Idiots!), and everything seems to work. If 4.0.1.0 breaks your Firefox, please don’t complain to me!

BUGS: If you find any, please let me know, so that I can try to fix them.

If you have already installed Wizz RSS 4.0.1.0, just reinstall it from here http://blat.co.za/XPIs/wizzrss4010.xpi

If you have “purchased” a nag free version of Wizz RSS, you can get the nag free version here http://www.wizzrss.com/dlnn.php

<edit>
Errrrmmmmm… Okay, I’m a bit slow. I didn’t realize the FF 5.0 final had been released today (21/06) – Sheepish grin. So when I installed 5.0b7, hopefully it actually updated itself to 5.0 final. My apologies to the Mozilla idiots for calling them idiots
</edit>

Firstly, the context menu bug has been fixed. This bug was causing the usual Firefox context menu (the Firefox menu that usually pops up when right clicking on a page) to not display, after having right clicked on the Wizz RSS sidebar.

Secondly, the bug that was causing feeds and/or folders to not be deleted, when selecting delete from the context menu, has been fixed.

Lastly, the bug that was causing nothing to be restored from the Wizz RSS server, when selecting to overwrite existing data, has been fixed.

You can get Wizz RSS 4.0.1.0 here.

If you have “purchased” a nag free version of Wizz RSS, you can get the nag free version here.

If you’ve been having trouble getting the feed publication interface to work, it should all be working now (I hope). You can see a working example here: – http://www.wizzrss.com/PublishNew.php

Twitter might be a better mechanism for reporting bugs, and keeping up to date with various happenings.

Not only were Wladimir Palant and Jorge Villalobos “selling” nsIScriptableUnescapeHTML.parseFragment() as the cure-all for potential security issues with displaying web content within the chrome context, but Jorge Villalobos even went as far as making this comment in Bugzilla: -

After reviewing these comments and the extension code, it is clear to me that the current effort to secure the add-on is misguided. You can’t just rely on ’sanitizing’ input and expect it to be “safe enough”, specially when there are clearly safer alternatives.

I have sandboxed all versions of Wizz RSS News Reader except the latest one, and all versions of Reader Lite, including the latest. Its trusted status has been revoked as well.

Mike, you have 2 weeks to correct your extension code to make it safe. You should upload the update on AMO and let us know so that we can review it. If you don’t comply by then, your latest version will be sandboxed as well. I also recommend you read our latest add-on policies (https://addons.mozilla.org/en-US/developers/docs/policies/) and make sure you
comply with all of them. For example, your current version doesn’t follow our namespacing guidelines, which makes your add-on a likely cause of compatibility problems.

Thanks to Roberto Suggi Liverani, who posted this link today – http://malerisch.net/articles/ParanoidFragmentSink_and_a_confusing_disclosure.html – it is now quite clear that my efforts were not misguided, and clearly Jorge’s “safer alternatives” weren’t safe at all!

Anyway, regardless of the stupidity of the little boys at Mozilla, nsIScriptableUnescapeHTML.parseFragment() has been fixed. It only took 16 months!

Wizz RSS hooks into nsIScriptableUnescapeHTML.parseFragment() for sanitizing web content. So, if you use a version of Firefox that includes the fixed version of nsIScriptableUnescapeHTML.parseFragment(), you’ll now be safe. Hmmmm… Well… Safer. It is pretty obvious that the self acclaimed “security experts” at Mozilla can’t be trusted, so we’ll just hope and pray that this time they actually got it right.

I have set maxVersion of Wizz RSS 4.0.0.0 to 4.0.*, which means that it should work with Firefox 4.0b8, and it should continue to work with all future releases of Firefox 4, including the production release, whenever that might happen.

You can get Wizz RSS 4.0.0.0 here http://blat.co.za/XPIs/wizzrss4000.xpi or here http://www.wizzrss.com/XPIs/wizzrss4000.xpi

If you happen to find any bugs with 4.0.0.0, please report them, so that they can get fixed.

If you “bought” a “nag free version” of Wizz RSS, by making a donation, you can update your “nag free version” here http://www.wizzrss.com/dlnn.php – You DO NOT have to make another donation!

If you are one of those who use Tab Mix Plus and Wizz RSS, don’t worry, you haven’t gone crazy There is some pretty serious weirdness when both add-ons are enabled.

Eric reported the problem in the Tab Mix Plus support forum, and onemen (one of the Tab Mix Plus developers I assume) has undertaken to sort out the problem on the Tab Mix Plus side. Thanks onemen!

The scroll bar weirdness persists, but the latest news on Bugzilla ( https://bugzilla.mozilla.org/show_bug.cgi?id=584703 ) indicates that a fix has been landed for testing. Maybe 4.0b6 will include the fix.

You can get Wizz RSS 4.0 here

The vertical scroll bar bug in the item pane (XUL listbox widget) persists. I guess a bug fix wasn’t landed in time for the release of 4.0b3. Oh well… I assume it will get fixed at some time.

If you have already installed Wizz RSS 4.0 for Firefox 4.0b2, and want to use it with Firefox 4.0b3, just reinstall it.

You can get Wizz RSS 4.0 here