[53156] in Cypherpunks
Re: caching of form posts in netscape (was:(none))
daemon@ATHENA.MIT.EDU (John Robert LoVerso)
Tue Apr 2 10:40:40 1996
To: jsw@netscape.com
Cc: Lucky Green <shamrock@netcom.com>, cypherpunks@toad.com, karlin@sfnb.com
In-Reply-To: Message from Jeff Weinstein <jsw@netscape.com>
<3160E338.1805@netscape.com> .
Date: Tue, 02 Apr 1996 10:16:18 -0500
From: John Robert LoVerso <john@loverso.southborough.ma.us>
> This next beta will also include several other security/privacy related
> features/preferences:
> 2) Warning dialog on "mailto:" form posts
Also add a warning dialog on any form post that includes a file upload.
This will prevent any re-occurance of the JavaScript bug I was about
to exploit in 2.01 that let code upload files without the user's knowledge.
(That particular bug is fixed in 3.0b2).
John
