Simon Willison’s Weblog

Items tagged browsers, ie, contenttypes in 2008

Filters: Year: 2008 × browsers × ie × contenttypes ×


Flirting with mime types [PDF] (via) Different browsers have different rules for which content types will be treated as active content (and hence could be vectors for XSS attacks). IE uses a blacklist rather than a whitelist and hence rendered active content for 696 of the tested content types. # 14th April 2008, 8:18 am

Types

Years

Months

Tags