this is probably the best place to start. -Robert</p>
<pre>
TBD
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=476157">476157</a> NSS_3_11_10_WITH_CKBI_1_67_RTM for 1.8 branch
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=442012">442012</a> Allocating more than 4GB using nsMemory::Alloc(size_t) succeeds but less memory is allocated
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=461735">461735</a> [FIX]Security: theft of strings cross-domain with redirect, <script src> and window.onerror
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=363897">363897</a> Don't give onerror handlers detailed information about syntax errors in off-site "scripts"
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=481181">481181</a> Update SeaMonkey version number on GECKO181_20090302_RELBRANCH
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=365526">365526</a> Security Error: Content at about: may not load or link to {xxx}.
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=400822">400822</a> Cert Viewer crashes when encountering improperly encoded GeneralNames (in AIA or CDP extensions) [@ ProcessGeneralName]
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=470027">470027</a> bug 461735 not fixed in 1.8.1.19 on Win32
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=472344">472344</a> Regression - Crash [@ nsIFrame::GetView] when using Silverlight
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=472648">472648</a> [FIX]XBL not working in signed jar
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=479336">479336</a> IDN blacklist needs to include box-drawing characters
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=478901">478901</a> Upgrade libpng to 1.2.35 (libpng-1.2.34 and earlier might free undefined pointers)
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=475136">475136</a> Crash [@ nsCSSStyleSheet::GetOwnerNode] after GC
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=331088">331088</a> crash with <input type=file> and events
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=470461">470461</a> [FIX]Create frames for XBL that's security-blocked (1.8 branch only).
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=450876">450876</a> Crash [@ nsEventStateManager::GetNextTabbableMapArea] with img usemap and tabindex
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=454142">454142</a> Crash [@ js_TraceScopeProperty] with gczeal, setter, watch
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=473709">473709</a>"Assertion failure: cursor == (uint8 *)copy->messageArgs[0] + argsCopySize, at jsexn.c" or "Assertion failure: cursor == (uint8 *)copy->messageArgs[0] + argsCopySize, at jsexn.cpp"
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=380418">380418</a> XMLHttpRequest allows reading HTTPOnly cookies
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=414540">414540</a> RDFXMLDataSource should reject cross-domain redirects
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=437142">437142</a> [FIX]Crash [@ nsStyleContext::Destroy] with image map, MathML
<ahref="https://bugzilla.mozilla.org/show_bug.cgi?id=401042">401042</a> Crash [@ nsInlineFrame::ReflowFrames] with ::first-letter float, binding, pre and //