[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] safari dos




Am 23.11.2003 um 03:10 schrieb kang@insecure.ws:
Am 22.11.2003 um 01:58 schrieb kang@insecure.ws:
A very simple javascript block like this one:

while (true)
{ document.location "sherlock://com.apple.movies?" }


or just shorter while(1){}

Ahaha, I'm not sure that it makes a very significant change :)
probably even just "sherlock://" works
and probably some other loops are vulnerable, but it's the same kind

and how is about while(1){document.write('yes')? bugs camino, mozilla and explorer, at least on osx ;P

i like the different behaviours of each.

Christian

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html