Vulnerability Development mailing list archives

IE Bug in Javascript Navigator Object


From: Uli Häfele <uli.haefele () mindlab de>
Date: Thu, 1 Apr 2004 18:22:07 +0200

I discovered a strange thing with the MS/IE recently. The Javascript
Navigator Object can be written by just adding a property.
The following code used within an html page

<script>
navigator.myString = "Hello world";
</script>

adds the property myString to the navigator object.
The content of the navigator object is existent as long as the current
Browser window is open.
I can read the content of the object even from different domains (first
domain writes the string, second domain reads it)
Mozilla doesn't allow the navigator object to cross the domain borders.

I'm not even sure if this is a bug. Is this behaviour correct?


_________________________________

Access your knowledge
http://www.mindlab.de/



Current thread: