I couldn't find a dup bug for this one and so am recording what I found. Using a post request with an encoding type of multipart/form-data leaves a temporary file behind. In order to see this, -clean out your /tmp (or $TEMP) directory. -click on this link above -click submit on that page -check to see a 'formpost' file in your temp directory! Am leaving this as Linux (which is where I tested) but I believe this would be all platforms.

Subsequent posts add a number to the 'formpost' file. Adding privacy, rtm keywords and cc'ing mstoltz.

Also on Win2k. To reproduce: - Exit all apps - Clean %TEMP - start Mozilla - go to http://gemal.dk/browserspy/upload.html - upload a file - press stop - exit Mozilla a file called "formpost" exits that contained the entire file you tried to send.

Marking rtm need info. Setting Priority to P1, based on security issue of leaving around a file with all of the post data.

This is bug 15320. Marking it a duplicate... *** This bug has been marked as a duplicate of 15320 ***

Verified dupe.