Re: Problem in IE's File Type Recognition
[email protected] (Peter Gutmann)
| Newsgroups | gmane.comp.security.vulnerabilities |
|---|---|
| Message-ID | <[email protected]> |
[email protected] writes: >I found out one way to make Internet Explorer ver 6.0 recognize incorrectly >type of any particular files. E.g one file named "abcd.exe" is Application >type but we can force the IE browser to understand that file is "Image/JPG" >or "Image/Gif" and so on .. Isn't this well-known? Because so many sites incorrectly identify content, MS made IE able to dig into content to recognise the true type in order to make broken sites "work". There's a config option buried somewhere deep down where you can turn this "intelligence" off ("Open files based on content, not file extension"), but it's enabled by default. Peter.