Home page logo

fulldisclosure logo Full Disclosure mailing list archives

A Popup! In Mozilla!
From: James Woodcock <spamtrap2 () austarnet com au>
Date: Wed, 21 Jul 2004 14:13:09 +1000

This might seem like it should be going to a webdev list, but there's a possible security implication, so here goes;


In Mozilla 1.5 and FireFox 0.9 with the pop-up blocker turned on, I get a pop-up! It's purporting to be an important notice from my Network Administrator - you'll probably recognise it;


Looking at the source of the page, I see that the pop-up is being generated by a <DIV> statement that comes after the closing </html> tag which - I thought - was supposed to indicate the end of the document.

Is a web browser supposed to be able to render code outside the <html></html> tags?

Using IE 6.0.2800.1106, on viewing the source, I find that the DIV statement that followed the closing </html> tag is now the last statement BEFORE the </html> tag. What gives?


Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]