Vulnerability Development mailing list archives

RE: IE7 SELECT Tag

From: "Damhuis Anton" <DamhuisA () aforbes co za>
Date: Thu, 2 Nov 2006 09:33:40 +0200


Stupid question....

Is IE7 not more reliant on well formed HTML?
Maybe it expects the </option> tags.

Don't have IE7, so I can not check.

However it would still be a bug, either way.

Regards
  Anton

SIG: "Great opportunities  to help  others
      seldom come, but small ones surround
      us every day."          - Sally Koch

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of dan.ross () picbusiness com
Sent: 31 October 2006 04:21 PM
To: vuln-dev () securityfocus com
Subject: IE7 SELECT Tag

I just installed IE7 this morning, then promptly found my first bug.

Now, imagine instead of fruit, you're picking which bank account to
transfer money to/from...


Sample Code:
<html>
<body>
<B>Please choose one:</B> &nbsp;
<SELECT onchange=alert('hi') size=1 name=favorite> <OPTION value="">
<OPTION value=1>Apple <OPTION value=2>Banana <OPTION value=3
selected>Cashew <OPTION value=4>Orange </SELECT> </body> </html>

Confidentiality Warning
=======================

The contents of this e-mail and any accompanying documentation
are confidential and any use thereof, in what ever form, by anyone
other than the addressee is strictly prohibited.

Current thread:

IE7 SELECT Tag dan . ross (Nov 01)
- Re: IE7 SELECT Tag Stefano Zanero (Nov 05)
- <Possible follow-ups>
- RE: IE7 SELECT Tag Damhuis Anton (Nov 02)
- RE: IE7 SELECT Tag dan . ross (Nov 02)