[3917] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: Netscape eggs

daemon@ATHENA.MIT.EDU (John Robert LoVerso)
Sun Dec 29 11:50:51 1996

To: Astley Chan <astley@dmf328.ust.hk>
Cc: www-security@ns2.rutgers.edu
In-reply-to: Message from Astley Chan <astley@dmf328.ust.hk> 
	<199612281952.DAA02513@dmf328.ust.hk> .
Date: Sun, 29 Dec 1996 09:40:52 -0500
From: John Robert LoVerso <john@loverso.southborough.ma.us>
Errors-To: owner-www-security@ns2.rutgers.edu

> > It doesn't check for divide by zero errors. Try putting this in a web page:
> If you try "open location" and type "mocha:9/0" it will give you "-NaN".

This is all losing sight of the purpose of this mailing list.  This isn't
www-software-bugs, after all.

As for this thread, please remember there is no single "Netscape
Navigator" (aka mozilla).  In fact, there are at least three
significantly different programs with that name, and each of those
come in a myriad of versions.  Was the original poster using a Mac
and the follow up author a Windows machine?  Will one problem affect
one platform and not another?  Yup.  On at least one UNIX machine I
tested, using "javascript:9/0" causes a 3.01 Navigator to take an
exception and die a quick death.

As for "Mocha", keep in mind that it isn't anything secret.  It is simply
the internal name for something initially released by Netscape as "Livescript"
and afterwards renamed to "JavaScript".  All three are still accepted by
Navigator.

John

home help back first fref pref prev next nref lref last post