-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday 30 May 2001 06:21, toad said:
> The attached file (recently posted to bugtraq by "eDvice Security Services"
> <[EMAIL PROTECTED]> as an exploit to another filter proxy) is picked
> up by fproxy's filter, but only the meta tag that sets the character set.
> This is used by, for example, the Freenet China News sites, though they use
> charset=gb2312 (and have hyperlinks; they are picked up on the content
> filter on both counts). Point is, any foreign language web page, even
> without hyperlinks, will trip the filter. Therefore foreign language
> freesite readers will turn off the content filter. Isn't there some java
> support for this stuff? (finding which chars could correspond to an
> "<script" ?).

First, you mean JavaScript, not Java.  Secondly, the filter trips on all 
JavaScript anyway.

I think this shows once again why the filter (as we have it set up right now) 
is just a bad idea.

- -- 
Timm Murray

 . . . example of a mobius.  This sentence is an example of a mobius.  This 
sentence is an . . . 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.5 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE7FSiQ9FVoObiUQx8RAtwMAJ9v8ufBs6AyeBF3j0PSelJb240WDQCfSCn5
AvVgNfOIgdwfYDb6FUZ0AAg=
=572H
-----END PGP SIGNATURE-----

_______________________________________________
Devl mailing list
[EMAIL PROTECTED]
http://lists.freenetproject.org/mailman/listinfo/devl

Reply via email to