Re: TXT or HTML? -- IE NEW BUG
From: Oliver Bleutgen (meinbugtraq@gmx.net)Date: 07/30/01
- Previous message: Michal Zalewski: "[RAZOR] Linux kernel IP masquerading vulnerability"
- Maybe in reply to: cr4zybird: "TXT or HTML? -- IE NEW BUG"
- Next in thread: Aaron Bentley: "Re: TXT or HTML? -- IE NEW BUG"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Message-ID: <20010730073629.2434.qmail@securityfocus.com> Date: Mon, 30 Jul 2001 09:25:32 +0200 From: Oliver Bleutgen <meinbugtraq@gmx.net> To: devnull@jm4n.com Subject: Re: TXT or HTML? -- IE NEW BUG
> In response to:
>> > > IE doesn't recognize the extensions of files, which
>> > > may contain some html code.
> and:
>> > It's worse than that - even if you have a cgi script that outputs
>> > a content-type of "text/plain" - some (all?) version of IE still...
> I've found that IE (4.0 through 5.5) follow a certain pattern for remote
> files:
> First it checks the content-type, before any data is looked at. From here
> it
> does one of three things:
>[...]
Hi,
might be of interest....
cheers,
oliver
- Previous message: Michal Zalewski: "[RAZOR] Linux kernel IP masquerading vulnerability"
- Maybe in reply to: cr4zybird: "TXT or HTML? -- IE NEW BUG"
- Next in thread: Aaron Bentley: "Re: TXT or HTML? -- IE NEW BUG"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|