Background: I know the practice of user agent sniffing isn't approved, but I encountered a bug in Firefox 17.0 that enabled HTML and Javascript source code editing in the WYSIWYG editor FCKEditor which is bundled into Coldfusion 10 and prior versions regardless if that editor is officially supported or not. I'm trying to prevent version 17.0 from being able to expose this vulnerability, but UA sniffing in this case has proven to be not useable as it falsely returns the incorrect browser version for 17.0.1 users.
Question: Why is the user agent in Firefox 17.0.1 actually listed as 17.0 in the user agent string?
Details: My Firefox 17.0.1 user agent shows as: Mozilla/5.0 (Windows NT 6.0; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0
I expected the user agent to look like this without question: Mozilla/5.0 (Windows NT 6.0; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0.1
I suspect this is the source of the behavior, but I'm not sure: https://bugzilla.mozilla.org/show_bug.cgi?id=792054