[21957] in bugtraq
Re: TXT or HTML? -- IE NEW BUG
daemon@ATHENA.MIT.EDU (Stephen Cope)
Sat Jul 28 21:58:29 2001
Date: Sat, 28 Jul 2001 15:33:59 +1200
From: Stephen Cope <mail-e-e4f9ad24cc1631d595@kimihia.org.nz>
To: bugtraq@securityfocus.com
Message-ID: <20010728153359.A27494@mess.kimihia.org.nz>
Mail-Followup-To: bugtraq@securityfocus.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20010727220715.677.qmail@securityfocus.com>; from cr4zybird@hotmail.com on Fri, Jul 27, 2001 at 10:07:15PM -0000
cr4zybird wrote:
: TXT or HTML? -- IE NEW BUG
Na, old. IE likes to interpret files based on extension, rather than MIME
type, as specified in Content-* response headers.
http://support.microsoft.com/support/kb/articles/q258/4/52.asp
I believe it is to cover over errors made by some server admins in
configuring their servers. However to become compliant, one should fix the
problem, NOT work around it. For in that way lies bloat.
: vulnerable programs:
: IE4 ,IE5 ,IE5,IE6 ,Microsoft Word ,Microsoft
: Excel,Microsoft PowerPoint,
IE4 is atrocious. I have a particular file that appears to have a .txt
extension but is intentionally forced to an
application/x-you-gotta-be-kidding (or similiar) MIME type. IE4 interprets
it as HTML.
IIRC IE5.5/Win asks you to save it to disk.
: description:
: IE doesn't recognize the extensions of files, which
: may contain some html
The opposite: it ignores the Content-Type and acts on the extension.
--
Stephen Cope - http://sdc.org.nz/
