[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: lynx-dev Crash with this fragment
From: |
pg |
Subject: |
Re: lynx-dev Crash with this fragment |
Date: |
Sat, 5 Feb 2000 08:41:14 -0700 (MST) |
In a recent note, David Woolley said:
> Date: Sat, 5 Feb 100 12:19:41 +0000 (GMT)
>
> > Hi, I found this bit of HTML
> > that makes lynx 2.8.1rel.1 crash
> >
> > <img <br>src="
>
> This is not HTML. HTML doesn't allow < in <
>
The focus should be not on whether the text is valid HTML, but
on whether Lynx is robust enough to weather it, however invalid.
I have similar misgivings about the change to prevent Lynx connecting
to WKS port 19. This barely protects Lynx (although it may protect
port 19). If someone chooses to run a server on port 80 which behaves
similarly to chargen, Lynx is again at risk.
-- gil
--
StorageTek
INFORMATION made POWERFUL