Vulnerability Development mailing list archives
IE Bug in Javascript Navigator Object
From: Uli Häfele <uli.haefele () mindlab de>
Date: Thu, 1 Apr 2004 18:22:07 +0200
I discovered a strange thing with the MS/IE recently. The Javascript Navigator Object can be written by just adding a property. The following code used within an html page <script> navigator.myString = "Hello world"; </script> adds the property myString to the navigator object. The content of the navigator object is existent as long as the current Browser window is open. I can read the content of the object even from different domains (first domain writes the string, second domain reads it) Mozilla doesn't allow the navigator object to cross the domain borders. I'm not even sure if this is a bug. Is this behaviour correct? _________________________________ Access your knowledge http://www.mindlab.de/
Current thread:
- IE Bug in Javascript Navigator Object Uli Häfele (Apr 01)
- Re: IE Bug in Javascript Navigator Object Berend-Jan Wever (Apr 02)