Full Disclosure mailing list archives

Interesting side effect of the new IE patch


From: "Schmehl, Paul L" <pauls () utdallas edu>
Date: Wed, 4 Feb 2004 16:04:13 -0600

Since the IE browser no longer allows the @ sign in a uri, you can no
longer download files from some vendors' sites.  Still works in Netscape
7.1, however.  So far I've found three sites, but I haven't done an
extensive investigation.  These are just ones that I've stumbled across.
The most interesting one is NAI's download site for enterprise licensed
software packages.  (I suppose, if one was ambitious, one could google
for @?)

I wonder how many other vendors are "cheating" on the RFCs to facilitate
browser interaction?

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: