Yes, you can control the code run by your browser. The solution is
simple, either install the security update or configure Safari to open
TextEdit or some other harmless app for applescript links. bling
blang, done.

per


On Wed, 19 May 2004 12:35:43 -0700 (PDT), Jason <[EMAIL PROTECTED]> wrote:
> 
> Hmmm, doesn't this fall into the realm of 'executing
> arbitrary code via a web browser'? (which you
> shouldn't do)
> 
> It's been awhile since I've used Safari/OS X browsers,
> can you not control the code run by your browser? Or
> is this help: issue tricky enough to subvert such
> controls?
> 
> Jason
> 
> 
> --- Ben Barrett <[EMAIL PROTECTED]> wrote:
> > But why should you be concerned, Larry?
> > That laptop will run bsd, right?  =)
> >
> > ciao,
> >
> >    Ben
> >
> > PS - congrats!  It seemed like a good machine for
> > you.
> >
> >
> > On Tue, 18 May 2004 19:49:58 -0700 (PDT)
> > larry a price <[EMAIL PROTECTED]> wrote:
> >
> > |
> > | execute a script from a url
> > |
> > | http://bronosky.com/pub/AppleScript.htm
> > |
> > | for a demon striation
> > |
> > |
> > | she includes a fix
> > |
> > | myself I am wondering if url-encoding the string
> > would fix the issue with
> > | spaces in the exploit string not being
> > recognised...
> > |
> > | ps. this concerns me too since I am getting my
> > laptop back (Yay!)
> > |
> > | _______________________________________________
> > | EUGLUG mailing list
> > | [EMAIL PROTECTED]
> > | http://www.euglug.org/mailman/listinfo/euglug
> > |
> >
> >
> > --
> > _______________________________________________
> > EUGLUG mailing list
> > [EMAIL PROTECTED]
> > http://www.euglug.org/mailman/listinfo/euglug
> 
>                 
> __________________________________
> Do you Yahoo!?
> SBC Yahoo! - Internet access at a great low price.
> http://promo.yahoo.com/sbc/
> _______________________________________________
> 
> 
> EUGLUG mailing list
> [EMAIL PROTECTED]
> http://www.euglug.org/mailman/listinfo/euglug
>
_______________________________________________
EUGLUG mailing list
[EMAIL PROTECTED]
http://www.euglug.org/mailman/listinfo/euglug

Reply via email to