[thelist] Cross-site scripting

Mark Kennedy mark at eurogamer.net
Thu Sep 20 15:12:00 CDT 2001


Thanks for the help guys,

AFAIK, the domain suffix solution is the best I'm gonna get.  Even the MSDN docs
say so :-(

Mark

On Thu, 20 Sep 2001, Peter-Paul Koch wrote:

>>| If the domains do not share a common higher level domain,
>>| it's impossible.
>>|
>>| ppk
>>
>>Peter-Paul,
>>
>>What about signing scripts? Can you certify them somehow?
>
>Maybe, I'm quite hazy on the details of signing, especially since they work 
>in NN only. No doubt IE will have its own, radically different take on this.
>
>>I'm really in some dark hallway on this one.
>
>Me too.
>
>>At least, I think it is a hallway.
>
>In Netscape, but in Explorer it's a corridor <g>.
>
>ppk
>
>_________________________________________________________________
>Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
>
>
>
>---------------------------------------
>For unsubscribe and other options, including
>the Tip Harvester and archive of TheList go to:
>http://lists.evolt.org Workers of the Web, evolt ! 
>

 






More information about the thelist mailing list