Normally I don’t post about ports that much, but this is a pretty commonly used application: the dfports override for FireFox brings it to the more-secure 1.0.4., thanks to Jeroen Ruigrok/asmodai’s commit.