[16673] in bugtraq
More on: Prosible privacy issue in Explorer.
daemon@ATHENA.MIT.EDU (Guille (Bisho))
Sat Sep 9 02:18:24 2000
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Message-Id: <39B97F96.5C87885@redestb.es>
Date: Sat, 9 Sep 2000 02:08:54 +0200
Reply-To: bisho@eurielec.etsit.upm.es
From: "Guille (Bisho)" <guille@REDESTB.ES>
To: BUGTRAQ@SECURITYFOCUS.COM
The component used to store the data was the "UserData Behavior"
I found a reference to its use in:
http://msdn.microsoft.com/workshop/browser/createwp.asp
See the paragraph "Persisting Editable Content"
Also in:
http://www.microsoft.com/Windows/ie/TechInfo/techdocs/IE5WP.asp
See paragraph entitled "Persistence"
The data, as oposed to cookies is not set by default to the origin
server in every request, but it could be sent easily by using javascript
and GET uris.
--
\|||||||/ Guillermo Pirez Pirez
< o o > - bisho@onirica.com
\ L / - bisho@eurielec.etsit.upm.es
-oOOo-------oOOo-
Onmrica: Analisis, diseqo e implantacisn de soluciones informaticas
http://www.onirica.com
