[22006] in bugtraq
remove me from this mailing list
daemon@ATHENA.MIT.EDU (Todd Bates)
Mon Jul 30 15:17:46 2001
Message-ID: <1720D5C9CF7AD411B30700010226ECC983BDDA@atlexchange.internal.secureworks.net>
From: Todd Bates <tbates@secureworks.net>
To: bugtraq@securityfocus.com
Date: Mon, 30 Jul 2001 13:14:12 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
-----Original Message-----
From: Magnus Bodin [mailto:magnus@bodin.org]
Sent: Sunday, July 29, 2001 7:28 AM
To: Nathan Neulinger
Cc: bugtraq@securityfocus.com
Subject: Re: TXT or HTML? -- IE NEW BUG
On Sat, Jul 28, 2001 at 06:56:15PM -0500, Nathan Neulinger wrote:
> > IE doesn't recognize the extensions of files, which
> > may contain some html
> > code.
> > Write a HTML file on NOTEPAD. save it as *.txt.
> > upload to any server.then
>
> It's worse than that - even if you have a cgi script that outputs a
> content-type of "text/plain" - some (all?) version of IE still processes
> the doc as html. (This is a real PITA when using cgi scripts that output
> plain text documents sometimes containing html.)
No. But MSIE will do that if it finds some html-tags in the text.
MSIE is programmed to act as it knows better than the webserver serving the
MIME-header.
I've put up some test-examples here: http://x42.com/test/mime/
e.g. You cant start a textfile with the word "GIF89a" since it will be
interpreted as a gif-picture. Pure magic-numbers stuff there.
It's a little DWIM (do-what-i-mean) but a little more dumb than the
original Lisp-version in my opinion.
/magnus
--
:: Magnus Bodin
::::::.... http://x42.com/
::::::::::::::.......................
teislanorhmcp.>g-dfwvx/0b:y',"5()2168?*49zk
