Re: Image extension issue in mime.php
"Thijs Kinkhorst" <[email protected]>
| Newsgroups | gmane.mail.squirrelmail.devel |
|---|---|
| Message-ID | <[email protected]> |
On Fri, August 22, 2008 10:03, Paul Lesniewski wrote:
>> - IE interprets JavaScript when served within an "image" (that is,
>> something linked from <img src="">. - Apparently (?) it doesn't do this
>> when the file has a regular image extension, it then processes it as an
>> image. A typical Windows way of working I guess.
>>
>
> Hmm. Can anyone confirm this? Are there any sample URIs that we can
> see for this?
>
> I tried this in IE6:
>
>
> <img src='javascript:alert("hello")' />
The linked image file should contain the JavaScript. E.g.:
<img src='http://example.com/example.html' />
and then example.html contains javascript instead of an image. IE will
allegedly interpret the javascript in the file even though it has no
business doing that as it is an image.
Something like that, all from the top of my head though.
Thijs
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel