[11591] in www-talk@info.cern.ch
Re: Security: Cookies
daemon@ATHENA.MIT.EDU (Al Gilman)
Sat Apr 29 10:30:30 2000
Message-Id: <200004291420.KAA1213841@smtp2.mail.iamworld.net>
Date: Sat, 29 Apr 2000 10:25:39 -0500
To: Andrew Daviel <andrew@daviel.org>, www-talk@w3.org
From: Al Gilman <asgilman@iamdigex.net>
In-Reply-To: <Pine.LNX.4.10.10004281828480.28189-100000@home.daviel.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Resent-From: www-talk@w3.org
How do your proposals compare as to information model with the work of
Open GIS Consortium
http://www.opengis.org/
Al
At 06:33 PM 2000-04-28 -0700, Andrew Daviel wrote:
>
>An advisory recently about a cookie security problem :
>
>http://www.peacefire.org/security/jscookies/
>
>A site can set a cookie which contains a script, then
>open a frame on your cookie file thus executing the script with
>the domain of your PC, able to parse HTML files and directories
>on your PC.
>
>Cookies were also mentioned in the "cross platform scripting
>advisory" - which is really about web forums, chat rooms and
>query scripts being able to attack other HTML forms on the same
>server.
>
>
>Andrew Daviel
>http://vancouver-webpages.com/andrew
>Deniable unless digitally signed.
>
