RE: [Full-Disclosure] internet-explorer: bug or feature?

["Aditya, ALD [Aditya Lalit Deshmukh]" <aditya.deshmukh@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx>]

> ie shows me a page with the content 'mooh' and when i call
> 
>   about:<script>alert('*plopp*');</script>
> 
> a small alert popps up and says me '*plopp*', so it seems, that i can

this is a local zone for ie if you can manage to script it then you could 0wn 
other people without too much effort 

-aditya


________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html