Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Re: Firefox: about:blank is phisher's best friend Feb 17 2007 07:48PM
zonafirefox gmail com (1 replies)
Re: Firefox: about:blank is phisher's best friend Feb 17 2007 09:16PM
Michal Zalewski (lcamtuf dione ids pl)
On Sat, 17 Feb 2007 zonafirefox (at) gmail (dot) com [email concealed] wrote:

> I tested it in IE7 and has the same problem. Opera 9.10 blocks the
> opening of the new window but fails in the second button.

With MSIE7, it is possible only if you check 'Allow websites to open
windows without address or status bar' for that particular zone;
otherwise, all windows will have a minimal URL bar attached.

I'm not sure whether this setting is default - if it is, yeah, that'd be
bad for MSIE.

As far as Opera is concerned - by default, Javascript can't hide address
bars, and if you change this option, the originating URL is still
displayed.

/mz

[ reply ]







 

Privacy Statement
Copyright 2008, SecurityFocus