Firewall Wizards mailing list archives

Re: HTML DOS? (http://microsoft.com/NTServer/all/Downloads.asp)


From: "John Mitchell" <jmitchell () american-trouser com>
Date: Tue, 18 May 1999 09:37:11 -0500

    I have noticed this same behavior.  Guess what.  MS internet explorer work
wonderful on these pages.  Care to guess what the reasoning is behind that?  It
is this kind of stuff that gets everybody in a "dither" about their business
practices.  I will stop short before this becomes a rant.  Nevertheless, I feel
sure that it is an "undocumented feature" of the web site.

John

Roger Marquis wrote:

Has anyone attempted to browse:

        http://microsoft.com/NTServer/all/Downloads.asp

using Netscape Navigator and noticed what seems to be an HTML denial
of service?  I've tested this page with Javascript on and off, Java on
and off, cookies on and off, under FreeBSD, Linux and Solaris and the
behavior is consistent:

        * Navigator freezes for several seconds
        * CPU utilization climbs briefly to near 100%
        * memory usage climbs by 11MB
        * the 11MB or memory are not released even after leaving
          the page and clearing disk and RAM caches.

The page <HEAD> shows two possible sources for this extremely unusual
browser behavior:

        <HTML><HEAD>

        <META HTTP-EQUIV="PICS-Label" CONTENT='(PICS-1.1
        "http://www.rsac.org/ratingsv01.html"; l comment "RSACi North America
        Server" by "inet () microsoft com" r (n 0 s 0 v 0 l 0))'> <META
        NAME="MS.LOCALE" CONTENT="EN-US"> <LINK REL="stylesheet"
        TYPE="text/css" HREF="/NTServer/global/Netscape.css"> <SCRIPT
        SRC="/ntserver/inc/jscripts.js" LANGUAGE="javascript">

        </SCRIPT></HEAD>

Is there a tool (other than tcpdump) which can examine this
"Netscape.css" script?

--
Roger Marquis
Roble Systems Consulting
http://www.roble.com/

Attachment: jmitchell.vcf
Description: Card for John A. Mitchell


Current thread: