On Wed, May 30, 2001 at 12:06:20PM -0500, Timm Murray wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Wednesday 30 May 2001 06:21, toad said:
> > The attached file (recently posted to bugtraq by "eDvice Security Services"
> > <support at edvicetech.com> as an exploit to another filter proxy) is picked
> > up by fproxy's filter, but only the meta tag that sets the character set.
> > This is used by, for example, the Freenet China News sites, though they use
> > charset=gb2312 (and have hyperlinks; they are picked up on the content
> > filter on both counts). Point is, any foreign language web page, even
> > without hyperlinks, will trip the filter. Therefore foreign language
> > freesite readers will turn off the content filter. Isn't there some java
> > support for this stuff? (finding which chars could correspond to an
> > "<script" ?).
>
> First, you mean JavaScript, not Java. Secondly, the filter trips on all
> JavaScript anyway.
It trips on HTTP-Equiv's which give alternate text encodings. It doesn't trip on
for example UTF8 encoded javascript. You need the http-equivs to do the
javascript. Thus web pages using UTF8 containing encoded javascript...
>
> I think this shows once again why the filter (as we have it set up right now)
> is just a bad idea.
>
> - --
> Timm Murray
>
> . . . example of a mobius. This sentence is an example of a mobius. This
> sentence is an . . .
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.5 (GNU/Linux)
> Comment: For info see http://www.gnupg.org
>
> iD8DBQE7FSiQ9FVoObiUQx8RAtwMAJ9v8ufBs6AyeBF3j0PSelJb240WDQCfSCn5
> AvVgNfOIgdwfYDb6FUZ0AAg=
> =572H
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Devl mailing list
> Devl at freenetproject.org
> http://lists.freenetproject.org/mailman/listinfo/devl
--
Always hardwire the explosives
-- Fiona Dexter quoting Monkey, J. Gregory Keyes, Dark Genesis
_______________________________________________
Devl mailing list
Devl at freenetproject.org
http://lists.freenetproject.org/mailman/listinfo/devl
