[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [Full-Disclosure] Mouseover URL spoof with IE
- To: "Danny" <nocmonkey@xxxxxxxxx>, "Full-Disclosure (E-mail)" <full-disclosure@xxxxxxxxxxxxxxxx>
- Subject: RE: [Full-Disclosure] Mouseover URL spoof with IE
- From: "Thor Larholm" <thor@xxxxxxxx>
- Date: Wed, 9 Feb 2005 12:24:29 -0800
I'm guessing you are refering to the status bar which displays the
address of a link onmouseover.
The addressbar can by design be programmatically changed to display
anything you want at any time, including when you hover over a link and
the onmouseover event fires. Simply change the window.status property
from JS.
Thor
-----Original Message-----
From: full-disclosure-bounces@xxxxxxxxxxxxxxxx
[mailto:full-disclosure-bounces@xxxxxxxxxxxxxxxx] On Behalf Of Danny
Sent: Wednesday, February 09, 2005 8:32 PM
To: Full-Disclosure (E-mail)
Subject: [Full-Disclosure] Mouseover URL spoof with IE
Can the URL displayed on a mouseover in IE, be spoofed?
Thank you,
...D
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html