Vuln Dev
RE: IE7 SELECT Tag Nov 02 2006 07:33AM
Damhuis Anton (DamhuisA aforbes co za)

Stupid question....

Is IE7 not more reliant on well formed HTML?
Maybe it expects the </option> tags.

Don't have IE7, so I can not check.

However it would still be a bug, either way.

Regards
Anton

SIG: "Great opportunities to help others
seldom come, but small ones surround
us every day." - Sally Koch

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]]
On Behalf Of dan.ross (at) picbusiness (dot) com [email concealed]
Sent: 31 October 2006 04:21 PM
To: vuln-dev (at) securityfocus (dot) com [email concealed]
Subject: IE7 SELECT Tag

I just installed IE7 this morning, then promptly found my first bug.

Now, imagine instead of fruit, you're picking which bank account to
transfer money to/from...

Sample Code:
<html>
<body>
<B>Please choose one:</B>  
<SELECT onchange=alert('hi') size=1 name=favorite> <OPTION value="">
<OPTION value=1>Apple <OPTION value=2>Banana <OPTION value=3
selected>Cashew <OPTION value=4>Orange </SELECT> </body> </html>

Confidentiality Warning
=======================

The contents of this e-mail and any accompanying documentation
are confidential and any use thereof, in what ever form, by anyone
other than the addressee is strictly prohibited.

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus