Full write up discussing password theft with Firefox using RCSR, aka Reverse Cross-Site Request attacks.
You can download it from the following link: https://packetstormsecurity.com/files/download/52544/rcsr.txt
Source: https://packetstormsecurity.com/files/52544/rcsr.txt.html