[668] in Intrusion Detection Systems
RE: netscape
daemon@ATHENA.MIT.EDU (Mark G. Scheuern)
Mon Mar 18 23:19:06 1996
Date: Mon, 18 Mar 1996 06:26:47 -0500 (EST)
From: "Mark G. Scheuern" <mgscheue@Oakland.edu>
To: ids@uow.edu.au
In-Reply-To: <Pine.SGI.3.91.960304123142.21817A-100000@umbc7.umbc.edu>
Reply-To: ids@uow.edu.au
Netscape 2.01 allows Javascript to be disabled.
Mark
| Mark G. Scheuern | http://www.acs.oakland.edu/~mgscheue/ |
| mgscheue@oakland.edu | finger mgscheue@vela.acs.oakland.edu |
| MGScheuern@eWorld.COM | 20 67 4B E0 15 5C 7C 87 |
| 73150.1770@compuserve.com | 28 B3 DB BA 63 B1 5F A1 |
On Mon, 4 Mar 1996, Paul Danckaert wrote:
> Much nastier is JavaScript. There are all of the various exploits for it
> already.. for example, when you look at my web page with netscape 2.0,
> your browser will send me mail automatically. No java is involved, and
> you can't disable it. Javascript cannot be disabled within the browser,
> though it would be interesting to write a small proxy to filter out any
> javascript in a document.. and I don't even want to get into java..
