RE: HTTP Server's jobs for CGI applications

[Leslie Russell <leslier@xxxxxxxxxx>]

So, you mean to say that you don't go to any site that uses java script 
and cookies like oh lets say, www.ibm.com? 
What exactly do you do for information, if you restrict you use of the 
internet to only those sites that make use of validated HTML. 
If java script blows up your browser; a) contact the site development 
team and tell them cause they want to know, b)upgrade your browser but 
not to IE 5.x or NS 6.x, or c)don't go back to that site.
Yes, it is purely sloppy programming if java script blows up your browser 
or if tables are not displayed correctly or if colors are not dithered 
correctly. These problems are known to exist and there are work arounds. 
For instance if you don't want people snagging your cookies there is a 
little utility that you can get to stop that. 

http://filedudes.ionsys.com/win95/cookies/files/setpacb2.exe


>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<

On 7/17/00, 12:12:11 PM, boldt@ca.ibm.com wrote regarding RE: HTTP 
Server's jobs for CGI applications:


> Leslie wrote:
> >I don't get your point Hans, what you are talking about is
> >sloppy programming not security holes.

> OK, there are two separate issues in this current thread:
> 1) cookies and associated privacy issues; 2) JavaScript
> and associated security threats (which I didn't go into
> detail into)

> In either case, we're not talking about "sloppy programming".
> We're talking about specific intent either to collect
> personal information or to compromise client system security.

> Yes, you can certainly code JavaScript to detect specific
> browsers, but that can be overridden by disabling JavaScript.

> You could also detect on the server side which browser is
> requesting the resource. But then the HTTP variables involved
> can be faked or suppressed, so that's not a reliable
> technique either.

> My point is that it is only proper HTML coding style to not
> have any dependencies on JavaScript for people to use your
> web site.

> Cheers!  Hans

> Hans Boldt, ILE RPG Development, IBM Toronto Lab, boldt@ca.ibm.com


> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to 
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: 
david@midrange.com
> +---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---