Re: [Sheflug] Viewing hard drive

[Steve Tickle <xxxxx [at] xxxxxxxxxxxxxx>]

At 11:32 09/05/02 +0100, Chris J wrote:


>I knew there was summat I was going to follow up to many moons ago.
>
>You don't even need Javascript, at least on Windows boxes, as this would do
>the job:
><iframe src="file://c:\"></iframe>
>
>Completely safe as it doesn't send owt back to server, but for the
>uninitiated who don't know what a URL means, or how to read HTML its a
>rather nasty trick to play and one which I have seen used.
>Trying "file:///" (to try and get root directory) doesn't work though...what
>it does on a Linux box I can't say 'til I get home to play. Anyone want to
>experiment ?

Konqueror puts up an alert box saying that the untrusted page has a link to 
the local file system and no matter how many times you click OK 
(seemingly), it doesn't load the page.


Steve

___________________________________________________________________

Sheffield Linux User's Group -
http://www.sheflug.co.uk/mailfaq.html

  GNU the choice of a complete generation.