Vulnerability Development mailing list archives

Re: internet explorer view-source url


From: hellNbak <hellnbak () nmrc org>
Date: Mon, 10 Jun 2002 15:09:16 -0400 (EDT)



On Mon, 10 Jun 2002, John C. Hennessy wrote:

Perhaps its just me but I see this as a potential problem. From what I can
tell all versions of internet explorer 4 and above allow view-source urls.

view-source:http://www.news.com


I think it might be just you as doing a view-source:///boot.ini will show 
you the LOCAL boot.ini.  So, if I was a malicous web master, unless I can 
get some sort of code to execute this doesn't help me all that much.


-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

"I don't intend to offend, I offend with my intent"

hellNbak () nmrc org
http://www.nmrc.org/~hellnbak

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-


Current thread: