Documentation is your friend ...
In prior versions of Firefox, there were cases in which when the user submitted a file for uploading, the entire path of the file was available to the web application. This privacy concern has been resolved in Firefox 3; now only the filename itself is available to the web application.
But hey, that only affects Firefox 3 users. So we can wait ~ 4 months to fix it.
Yeah right. I am looking forward to the release day of IE8 and all the support calls once MS forces IE8 to it’s users, because it will behave in the same way.
Managers! You can’t work with them, you aren’t allowed to shoot them.