Re: +n- Flaw in IE
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.lang.javascript archive

Re: +n- Flaw in IE

From: Java script Dude <despam2004@yahoo.ca>
Date: Sun Jan 15 2006 - 05:57:39 CET

The way to duplicate is as follows:

1) Save the following file to your hard drive in ASCII:
 <html>
    <META http-equiv="Content-Type" content="text/html;
charset=western/iso">
    <head>
        <title>Wacky IE Flaw :]</title>
    </head>
    <body>
        +1-
        <script>
            var v="a"+"A"
        </script>
    </body>
</html>
2) Load the Web Page
3) Un-Check Auto-Select
4) Select Western European (windows)
5) Check Auto-Select
. . IE will now auto-detect as utf-7, reload the page and fail very
miserably
. . The page will now fail every time you load until you click on
Western European (windows) or Western European (ISO)
. . IE will completely ignore

Notes:
 - The above sounds convoluded but I two different developers machines
fail exactly the same way because of this without us hacking around
with encoding at all. Although a co-incedence, it will and I am sure
does happen.
 - If file is saved in Unicode or utf-8, it will be auto detected
because of data in the file header.
 - This problem only happens when file is saved as ASCII which is
unfortunately a very common format.
Received on Tue Jan 17 17:12:50 2006