[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: javascript Security... the official word



Dan Petramala wrote:
> 
> On Fri, 1 Mar 1996 11:16:06 -0800, you wrote:
> 
> >"THE WORLD WIDE WEB SECURITY FAQ (Version 1.2.0, February 28 1996)"
> >by Lincoln D. Stein <lstein@genome.wi.mit.edu>
> >- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

> 
> 2)grab the previous page they are coming from (aka referring page)
> 
> I would quickly add code to my page to use such features, since these items
> allow me to :

> 3) keep track of referring pages so that I can contact the admins there to
> notify/thank them for the posting....
> 

I think it would be great to do this also, but knowing the previous page may 
be a problem in that it maybe a private URL that isn't supposed to be known. 
 But that site should have security on it anyway (passwd), so as long as you 
can't grab their cache I don't see a problem.  Paranoid Security people (like 
the author of that announcement) would see a problem anyway and these are the 
people you have to get around, eh?  <sigh>

Lance D. Braud
lbraud@advtel.net
--------------------------------------------------------------------
For help about the list, please send a message to 'majordomo@obscure.org'
with the message body 'help'. To unsubscribe, send a message to
'majordomo@obscure.org' with the message body 'unsubscribe javascript'.
List archives and pointer to FAQ: http://www.obscure.org/javascript/