In a recent note, David Woolley said:

> Date: Sat, 5 Feb 100 12:19:41 +0000 (GMT)
> 
> > Hi, I found this bit of HTML
> > that makes lynx 2.8.1rel.1 crash
> > 
> > <img <br>src="
> 
> This is not HTML.  HTML doesn't allow < in <
> 
The focus should be not on whether the text is valid HTML, but
on whether Lynx is robust enough to weather it, however invalid.

I have similar misgivings about the change to prevent Lynx connecting
to WKS port 19.  This barely protects Lynx (although it may protect
port 19).  If someone chooses to run a server on port 80 which behaves
similarly to chargen, Lynx is again at risk.

-- gil
-- 
StorageTek
INFORMATION made POWERFUL

Reply via email to