[3872] in WWW Security List Archive
Re: Netscape eggs
daemon@ATHENA.MIT.EDU (htorgema@novice.uwaterloo.ca)
Sat Dec 21 06:24:57 1996
From: htorgema@novice.uwaterloo.ca
Date: Fri, 20 Dec 1996 18:11:32 -0500 (EST)
To: Robert Bell <rabell@icdh16.dseg.ti.com>
cc: www-security@ns2.rutgers.edu
In-Reply-To: <199612200436.WAA27545@tilde.csc.ti.com>
Errors-To: owner-www-security@ns2.rutgers.edu
On Thu, 19 Dec 1996, Robert Bell wrote:
>
> At a minimum, the mocha: egg appears to be a calculator, by
> simply enter a URL as eg. mocha:2*3 or mocha:2/3 or the
> command line generated by the egg mocha: can be used to enter
> the string to calculate the value of. It's a simple JAVA
> calculator. Neat, huh !
>
The Urls "mocha:" "livescript:" and "javascript:" are strictly equivalent.
you can too use "<SCRIPT language="mocha"> ... </SCRIPT>"
( it can be useful to insert some Netscape specific Javascript code.. )
if you like the about: stuff here some more:
about:FeCoNtExT=123
( If 123 is the internal id number of one of your current window, you will
have some info about this window..)
On Unix, you can try
about:francais
about:deutsch
Now, some redirections:
about:blythe
about:dp
about:fubini
about:jg
about:hagan
...
This about: shortcut redirect you to the home page of some netscape
members.
(Go to the page at netscape with all the users with a home page, and try
every name to have a complete list!)
Note that there's more than about: url
for example, you can use
<IMG src="internal-gopher-menu">
or
<IMG src="internal-icon-baddata">
...
Anyway, I doubt anyone find a way to compromise the security of a
client with such things...
---------------
Henri Torgemane http://www.undergrad.math.uwaterloo.ca/~htorgema/
Never let your sense of morals prevent you from doing what is right.
-- Salvor Hardin, "Foundation"
