bugtraq - Re: OBJECT Bugs or Features

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200406072349.i57NnSiS007532@turing-police.cc.vt.edu>
Date: Mon, 07 Jun 2004 19:49:28 -0400
From: Valdis.Kletnieks@...edu
To: James C Slora Jr <Jim.Slora@...a.com>
Cc: bugtraq@...urityfocus.com
Subject: Re: OBJECT Bugs or Features

On Mon, 07 Jun 2004 16:15:47 EDT, James C Slora Jr <Jim.Slora@...a.com>  said:

> 2. Should an email client process an OBJECT tag that is not even embedded
> within HTML tags? 

> Content-Type: text/html;
> Content-Transfer-Encoding: quoted-printable
> 
> ~object
> data=3D"http://www.seductiveones.~biz/easy/orrorr/sock/page.~php"~=20

Well.. at least it's a text/html.  Does it work if the Content-Type: is text/plain?

Content of type "application/pgp-signature" skipped