March 9th, 2002, 01:18 AM
um, was that a bug?
<body onLoad="newWin=window.open('here is a space ', 'message', toolbar=0, status=0, width=100,height=120);">
And if you leave a space where a url of the incoming page should be located, M$ opens up a temp directory, does this lead to vunurability of remote access to files on other peoples disks?
Or is this a compliment of M$?
[glowpurple]Terrible end is better than endless terror! [/glowpurple]
March 9th, 2002, 04:06 PM
hmm... i tried this and i got a blank window. I don't think there is anyway to exploit this and view someones harddrive. Now say you told it to open up a window with a java chat client you modified. The user would have to give the client permission to run but most ppl would just say yes to the permission box. That wud be a way to get remote acess.
Just my two cents,
[glowpurple]\"Your Smallest Flaw is my greatest Strength.\" - Me[/glowpurple]