[29052] in bugtraq
Re: Netscape 6/7 crashes by a simple stylesheet...
daemon@ATHENA.MIT.EDU (dwm)
Tue Feb 25 17:28:53 2003
From: dwm <dwm@althea.taco.com>
Message-Id: <200302252122.h1PLMKjM017292@althea.taco.com>
To: bugtraq@securityfocus.com
Date: Tue, 25 Feb 2003 16:22:20 -0500 (EST)
Reply-To: dwm@taco.com
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
jux@beer.com wrote:
> Hi, I'm new here so I don't know if I posted this in the correct list...
> I've found out that some simple CSS-code can crash Netscape 6 and 7.
> This is a simple html-page containing this code:
while we're on the subject...just this week I reported to Netscape that this simple
invalid (?) use of regex in "split" can also crash 7.x on windows.
Woopdidoo.
Tested:
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.2) Gecko/20030208 Netscape/7.02
<html>
<head>
<title>test</title>
<--script-- language="JavaScript">
function reformatDate(someDate) {
var tokens = someDate.split(/(\/|-)/);
if (tokens[1].length == 1) tokens[1] = "0" + tokens[1];
if (tokens[0].length == 1) tokens[0] = "0" + tokens[0];
var result = tokens[2] + tokens[1] + tokens[0];
alert(result);
//return result;
}
</--script-->
</head>
<body>
<form action="" method="GET" name="form1" onSubmit="return reformatDate(this.dt.value);">
MM/DD/YYYY - <input type=text name=dt>
<input type=submit>
</form>
</body>
</html>
