Full Disclosure mailing list archives

Netscape Communicator META Refresh Denial of Service


From: full-disclosure () lists netsys com (Roland Postle)
Date: Sat, 20 Jul 2002 20:19:10 +0100

If a META Refresh navigates to itself with no delay, Netscape
will loop, causing a stupid DoS.

Does it repeat the request for the page (or at least do an if-not-changed
GET, or a HEAD request)? IE is supposed to do this, so I always assumed
other browsers treated 'Refresh' the same way. If so, there would be a
(slight) delay, depending upon the connection, and it would, in theory, be a
useful feature.

- lazde



Current thread: