bugtraq - Re: unload event in ie/mozilla/opera

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 25 Aug 2005 00:18:10 -0700
From: Drew Haven <drew.haven@...il.com>
To: gillettdavid@...a.edu
Cc: Tobias Boonstoppel <boonstoppel@...il.com>,
	bugtraq@...urityfocus.com
Subject: Re: unload event in ie/mozilla/opera

In Firefox (the browser I was just testing that in), the only time
that seems to trigger is when a different address is placed in the
address bar.  Other events such as back, forward, and closing the
window don't call it.

What I found most interesting is that if you type an address in and
are redirected, the address bar will show the original URL, but if you
hit reload, you will see the URL of the site you typed in.

Is there a possibility to use this to spoof a URL?
-- 
Drew Haven
drew.haven@...il.com