Firewall Wizards mailing list archives

Re: HTML DOS? (http://microsoft.com/NTServer/all/Downloads.asp)


From: James "Thomas" Goltz <goltz () enlil kivex com>
Date: Tue, 18 May 1999 08:57:16 -0400

Roger Marquis writes:

rm> The page <HEAD> shows two possible sources for this extremely
rm> unusual browser behavior:

rm> <META HTTP-EQUIV="PICS-Label" CONTENT='(PICS-1.1
rm> "http://www.rsac.org/ratingsv01.html"; l comment "RSACi North
rm> America Server" by "inet () microsoft com" r (n 0 s 0 v 0 l 0))'>

This is, of course, just a PICS label rating the page as having no
"bad" content.

rm> <META NAME="MS.LOCALE" CONTENT="EN-US">

I'm not familiar with this META tag, but it looks benign.

rm> <LINK REL="stylesheet"
rm> TYPE="text/css" HREF="/NTServer/global/Netscape.css">

This is a stylesheet adhering to CSS1
(http://www.w3.org/TR/REC-CSS1).  It's not a script, and shouldn't
have that much impact on performance.  (You can retrieve it as a text
file, though you may need a non-interactive web client like wget.  I
can mail it out if there's interest.)

The bottleneck is probably all the Javascript code...

    <SCRIPT SRC="/ntserver/inc/jscripts.js" LANGUAGE="javascript"></SCRIPT>
    <script language="JavaScript" src="/library/toolbar/toolbar.js"></script>
    <script language="JavaScript" src="/library/toolbar/en-us/global.js"></script>
    <script language="JavaScript" src="/ntserver/toolbar/local_nts.js"></script>

    <script language="JavaScript">
    <!--// Hide from old browsers

    var ToolBar_Supported = ToolBar_Supported;
    if (ToolBar_Supported != null && ToolBar_Supported == true)
    {
            TBDownLevelDiv.style.display ='none';
            drawToolbar();
    }

    //-->
    </script>

...although even with all these removed, I still see a performance hit
(> 90% of CPU and an extra 12 MB RAM).

Anyone else have any ideas?

--
James "Thomas" Goltz <goltz () kivex com>          KIVEX NOC Engineer, Level 3

"Life is what happens while I'm busy fixing other people's problems."



Current thread: