Firefox users: Beware of Gmail XSS Attack
#-Link-Snipped-#
An exploit for Firefox, reported 10 days ago and as of yet still not patched, is #-Link-Snipped-# access to Google accounts, including gmail.
Firefox users are advised to use NoScript or turn off javacript on unknown webpages and stay logged out of their Google Accounts until a fix is issued.