lynx-dev
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: lynx-dev possible lynx bug?


From: David Woolley
Subject: Re: lynx-dev possible lynx bug?
Date: Sun, 9 May 1999 10:18:10 +0100 (BST)

> <INPUT TYPE="button" VALUE="Submit" 
> onclick="Validateandsubmit(this.form)">&nbsp;&nbsp;

This is not a Submit button, it is a script button and will only work for
JavaScript enabled browsers (enabling JavaScript is a serious security risk
for IE4 - there are a large number of "read local file" attacks known on it
unless you apply every security patch).

In any case, the "correct" way of doing this would have been to do validation
in an onsubmit action on the form element, and to use a straightfoward 
input type=submit for the submit button; that way you could still submit 
the form, but it wouldn't be validated.  (As you can alter the page to
submit the form anyway, they still need to do enough validation server side
to protect their system).  onsubmit event handler can abort a submission
by returning false.

Please raise the bug report against the site.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]