Valdis(_dot_)Kletnieks(_at_)vt(_dot_)edu wrote:
We have seen a number of attacks via e-mail that use text/html to carry
pointers to malicious code. We also had, many moons ago, a small war
regarding
text/html versus application/html.
I propose the following straw man:
text/html be redefined such that it contains static content only.
application/html be redefined such that active content such as Javascript
be allowed.
Hum.
What if the document does not contain directly script but has a LINK
to a js file ? If it contains a link to an applet ?
And if the document is the result of a CGI ?
</Daniel>