Beefy Boxes and Bandwidth Generously Provided by pair Networks
Perl Monk, Perl Meditation
 
PerlMonks  

Re: Filtering potentially dangerous URI schemas in <a href="...">

by Dog and Pony (Priest)
on Oct 21, 2002 at 15:07 UTC ( #206859=note: print w/replies, xml ) Need Help??


in reply to Filtering potentially dangerous URI schemas in <a href="...">

Agreed. On a related note, I saw a report that some special URL type related to windows help could wipe your computer under XP (SP1 fixes this). Apparently an url with a winhelp specific schema could order the computer to write a file to any place you name on disk. Such as somewhere in the system directories... No, no link, and not confirmed. But wouldn't be surprised if it was true.

Only allowing the above (https?, ftp, mailto) would eliminate such as well.


You have moved into a dark place.
It is pitch black. You are likely to be eaten by a grue.
  • Comment on Re: Filtering potentially dangerous URI schemas in <a href="...">

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://206859]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others chilling in the Monastery: (4)
As of 2022-12-06 21:32 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found

    Notices?