Fra poco sarà rilasciata una patch di IE che aumenta la sicurezza modificando il modo con cui vengono gestiti alcune tipologie di URL.
Microsoft plans to release a software update that removes support for handling user names and passwords in HTTP and HTTP with Secure Sockets Layer (SSL) or HTTPS URLs in Microsoft Internet Explorer. The following URL syntax is no longer supported in Internet Explorer or Windows Explorer after you install this software update:
http(s)://username:password@server/resource.ext
This article is intended to give you advance notice of this change in Internet Explorer's default behavior. If you include user information in HTTP or HTTPS URLs, Microsoft recommends that you explore the workarounds that are described in this article before you install this software update. Microsoft will post more information in this article when the software update becomes available.
Qui l'articolo completo:
http://support.microsoft.com/?kbid=834489
posted @ mercoledì 28 gennaio 2004 11:34