about:<script>alert('*plopp*');</script>What version of ie are you running? Unable to verify this behaviour on 6.0.2800
a small alert popps up and says me '*plopp*', so it seems, that i can
inject any code i want.
btw: about:mozilla seems to be special .. it looks a bit strange ..hehe, yes. try about:mozilla in mozilla :p
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
