RE: [Full-Disclosure] Mouseover URL spoof with IE

["Thor Larholm" <thor@xxxxxxxx>]

I'm guessing you are refering to the status bar which displays the
address of a link onmouseover.

The addressbar can by design be programmatically changed to display
anything you want at any time, including when you hover over a link and
the onmouseover event fires. Simply change the window.status property
from JS.


Thor

-----Original Message-----
From: full-disclosure-bounces@xxxxxxxxxxxxxxxx
[mailto:full-disclosure-bounces@xxxxxxxxxxxxxxxx] On Behalf Of Danny
Sent: Wednesday, February 09, 2005 8:32 PM
To: Full-Disclosure (E-mail)
Subject: [Full-Disclosure] Mouseover URL spoof with IE

Can the URL displayed on a mouseover in IE, be spoofed?

Thank you,

...D
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html