[pmwiki-users] Re: how does one encode "file:" link in a wiki page?

[Robin]

On Thursday 03 February 2005 10:48, chr at home.se wrote:
> Maybe he means that the webpage you're viewing could contain a Java
> script, that could check for local files if file://-links were allowed?
> (I'm just guessing here)
Yep, that's one thing. It's also possible that (either directly or via another 
vulnerability) local file contents could be read by javascript.

-- 
Robin <robin at kallisti.net.nz>             JabberID: <eythian at jabber.org>

Hostes alienigeni me abduxerunt. Qui annus est?

PGP Key 0xA99CEB6D = 5957 6D23 8B16 EFAB FEF8  7175 14D3 6485 A99C EB6D
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : /pipermail/pmwiki-users/attachments/20050203/1e635b0a/attachment.bin