*** FORWARD FAR AND WIDE - COULD BE IMPORTANT ***

Hi y'all,

Just discovered that someone's tried to sabotage my guestbook by using a bit of
rogue Javascript. As far as I can see, the person tried to create a link that,
when clicked, would spawn an infinite number of unresizable browser windows that
are 640x480 pointing to microsoft.com, and would inevitably crash anyone's
computer. Fortunately, the guestbook cgi script I use appears to have stripped
out all "<" and ">" characters to prevent this from happening - I'm emailling
you this so that you can test yours to make certain that this is also the case
for you.

There has recently been yet another flame war on comp.sys.sinclair about people
using Javascript and/or a special MSIE version of their webpages, and my views
have got a bit of flak from various people, so any of those people may have
decided to try and make a point.

If anyone wants to see what this person tried to do, take a look at:

    http://www.the-den.clara.net/gb/guestbook1.htm

It could have been nasty had the guestbook script not been a safe one.


Reply via email to