On Tue, 6 Dec 2005 11:43 , 'Russell Howe' <rhowe@siksai.co.uk> sent:

>On Tue, Dec 06, 2005 at 04:51:18AM -0500, Andrew Farnsworth wrote:
>> Ok, so much for reading my email via a web browser :-)  Talk about messing with someone's mind.  That came through in huge red type the everone across the room could read.  Kinda reminds me of the newby html author searching for help on how to write html pages and searching the web for "html"...
>
>Sounds like your webmail application is vulnerable to cross-site
>scripting attacks, then.
>
>It should replace all angle brackets and other characters considered
>'special' by HTML with character entities if it's rendering your emails
>as HTML for display via a brower.

Russell,

This is a new webmail client that is offered by my ISP.  I hate it and now, thanks to you, I have some real amunition to request they change it.  I wish they had never changed webmail clients.  What is really funny is that at the bottom of the screen it says "webmail Copyright 2002 webmail."

Andy


-- 
Gllug mailing list  -  Gllug@gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug


