[3916] in WWW Security List Archive
Re: Netscape 'secret' codes and security implications
daemon@ATHENA.MIT.EDU (Frank W. Vans Evers)
Sun Dec 29 10:34:56 1996
Date: Sun, 29 Dec 1996 08:33:11 -0500 (EST)
From: "Frank W. Vans Evers" <vans@cyberspy.cyberspy.com>
To: htorgema@novice.uwaterloo.ca
cc: Gary Howland <gary@systemics.com>, www-security@ns2.rutgers.edu
In-Reply-To: <Pine.OSF.3.93.961228205655.20050A-100000@novice.uwaterloo.ca>
Errors-To: owner-www-security@ns2.rutgers.edu
I played with the "wysiwyp" a little and discovered that it did not
matter what I put in front of the "helen-duval" I ended up at her or
their URL. So I don't think it is correct to credit this as a "ibm" find.
/s/ Frank
----
On Sat, 28 Dec 1996 htorgema@novice.uwaterloo.ca wrote:
> On Sat, 28 Dec 1996, Gary Howland wrote:
>
> > Check this out:
> >
> > wysiwyg://www.ibm.com/helen-duval.com/Img0001.jpg
> >
> > Not really what you'd expect to find at IBM, is it?
> >
> > I've just checked a few netscape easter egg sites, and none of them mention
> > the wysiwyg method.
>
> The wysiwig method is used when a javascript program dynamically writes
> into an html document..
> The usual result is something like:
>
> wysiwyg://315/http://www.a_site.com/index.html
>
> Where 315 is a value internally used by Navigator to keep track of the
> javascript-created document.
>
> Note that with Netscape 3.0, when the document is a mix of loaded html
> and dynamically generated html, the location textfield keeps the original
> url. However, if you use view-source, you'll see the title of the window
> is "Netscape: Source of: wysiwyg://..."
>
> Henri
>
> PS: I apologize to all those of you deseperately waiting for on-topic
> messages..
>
> ---------------
> Henri Torgemane http://www.undergrad.math.uwaterloo.ca/~htorgema/
>
> Never let your sense of morals prevent you from doing what is right.
> -- Salvor Hardin, "Foundation"
>
