Slashdot Mirror

← Back to Domains

Domain: xenoveritas.org

Stories and comments across the archive that link to xenoveritas.org.

Comments · 51

  1. Re:Solution by _xeno_ · · Score: 2, Interesting · on Scam Combines Patriot Act FUD With IE Bug
    You're doing it wrong. I'm assuming you're just inserting the %01 character into a URL. You actually have to sneak a "^A" character into the URL, either using JavaScript or an HTML entity. It does, in fact, work under IE6. Note that Mozilla (or at least Firebird) reescapes the bad character so it shows you the bad URL.

    Anyway, check out my sample page that demonstrates the bug.

    The basic and easiest way to reproduce this is something like "<a href="http://slashdot.org&#1;@www.msn.com/">...</a &gt".