RE: Mouseover URL spoof with IE

["Thor Larholm" <thor () pivx com>]

I'm guessing you are refering to the status bar which displays the
address of a link onmouseover.

The addressbar can by design be programmatically changed to display
anything you want at any time, including when you hover over a link and
the onmouseover event fires. Simply change the window.status property
from JS.


Thor

-----Original Message-----
From: full-disclosure-bounces () lists netsys com
[mailto:full-disclosure-bounces () lists netsys com] On Behalf Of Danny
Sent: Wednesday, February 09, 2005 8:32 PM
To: Full-Disclosure (E-mail)
Subject: [Full-disclosure] Mouseover URL spoof with IE

Can the URL displayed on a mouseover in IE, be spoofed?

Thank you,

...D
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html