ietf
[Top] [All Lists]

Re: filtering active content

2001-07-25 19:00:03
At 08:40 AM 25/07/01 -0600, Vernon Schryver wrote:
I've read somewhere that they sometimes ignore the 3 character DOS
filename or filetype extension and look for magic numbers in the data.
I've no way of evaluating that, or at least no inclination.

I know that both Explorer and Netscape do exactly this [for web content]. E.g. a filename with ".gif" can still contain an executable... and therefore a virus.

I believe you can find more specific details in the Netscape source code at mozilla.org.

John
---------------------------------------------------------------
Network Appliance           Direct / Voicemail: +31 23 567 9615
Scorpius 2                                 Fax: +31 23 567 9699
NL-2132 LR Hoofddorp               Main Office: +31 23 567 9600
---------------------------------------------------------------



<Prev in Thread] Current Thread [Next in Thread>