[XSL-LIST Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

xsl as a hacker's tool

Subject: xsl as a hacker's tool
From: "Bryan Rasmussen" <bry@xxxxxxxxxx>
Date: Fri, 12 Apr 2002 14:59:53 +0200
balloon.xsl
anyone read this?
http://www.theregister.co.uk/content/4/24815.html

it says that win-xp on executing a search downloads the following xsls

transform.xsl
balloon.xsl
prevectr.xsl
vector.xsl
boolean.xsl
pretrans.xsl
transform.xsl

why transform is repeated no idea, since I don't have XP can someone who
does send me these or post them or would this be illegal in our present day
world. I'm not gonna do this but it strikes me that bad people could maybe
write an exploit, manage to point the search at their own address instead of
http://sa.windows.com/ and then downloading their own xsls, these xsls would
hold ms namespace extensions and Oh boy!


 XSL-List info and archive:  http://www.mulberrytech.com/xsl/xsl-list


Current Thread

PURCHASE STYLUS STUDIO ONLINE TODAY!

Purchasing Stylus Studio from our online shop is Easy, Secure and Value Priced!

Buy Stylus Studio Now

Download The World's Best XML IDE!

Accelerate XML development with our award-winning XML IDE - Download a free trial today!

Don't miss another message! Subscribe to this list today.
Email
First Name
Last Name
Company
Subscribe in XML format
RSS 2.0
Atom 0.3
Site Map | Privacy Policy | Terms of Use | Trademarks
Free Stylus Studio XML Training:
W3C Member
Stylus Studio® and DataDirect XQuery ™are products from DataDirect Technologies, is a registered trademark of Progress Software Corporation, in the U.S. and other countries. © 2004-2013 All Rights Reserved.