Re: [Full-Disclosure] " * " in url

From: Lan Guy (rlanguy_at_hotmail.com)
Date: 01/13/04

  • Next message: Nick FitzGerald: "Re: [Full-Disclosure] " * " in url"
    To: "morning_wood" <se_cur_ity@hotmail.com>, <full-disclosure@lists.netsys.com>
    Date: Tue, 13 Jan 2004 10:21:09 +0200
    
    

    In IE6 SP1 I see it passed to a new broswer window then everything before
    the last * is cut.

    But that would not be foolproofing it
    http://rd.yahoo.com/hotjbs/*http://example.com
    Does the exact same

    and abit of testing lets you conclude that
    rd probably stands for redirect

    go to yahoo!'s homepage and Look under:
     Yahoo! Premium Services
    you will see:
    Personal Web Site
     · Sports Audio

    both of these function the same way

    Lan Guy

    ----- Original Message -----
    From: "morning_wood" <se_cur_ity@hotmail.com>
    To: <full-disclosure@lists.netsys.com>
    Sent: Tuesday, January 13, 2004 9:30 AM
    Subject: [Full-Disclosure] " * " in url

    > dunno if this is new but..
    >
    > http://pa.yahoo.com/*http://rd.yahoo.com/hotjbs/*http://example.com
    >
    >
    > m.wood
    >
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter: http://lists.netsys.com/full-disclosure-charter.html
    >

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html


  • Next message: Nick FitzGerald: "Re: [Full-Disclosure] " * " in url"