[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] EEYE: Temporary workaround for IE createTextRange vulnerab



Valdis.Kletnieks@xxxxxx wrote:


(I didn't even *mention* the cost of beating the snot out of the web developers
who coded IE-specific extensions into a corporate webpage, did I?   It's
usually not the actual install cost that gets you, it's the ripple effect that
providing the support generates...)

You're ultimately right about the cost, but the problem is that... well, what you've got there is bad practice that *must* be corrected anyway.

You'd better believe that when I find web developers being browser-reliant I raise a fuss. It doesn't always generate results but it does get the message across.

         -bkfsec


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/