OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

 


 

   Re: Malicious documents?

[ Lists Home | Date Index | Thread Index ]

I see that merely by visiting a page with a *really* big font you can
crash your X server (http://www.theregister.co.uk/content/55/25689.html).

Similarly I can hang Mozilla by loading the old "billion laughs"
document (http://www.cogsci.ed.ac.uk/~richard/billion-laughs.xml -
don't try it unless you're willing to restart your browser).

I had to install several checks on my XML checking page
(http://www.cogsci.ed.ac.uk/~richard/xml-check.html), in one case to
prevent it being used to download advertising images for which the
abuser presumably received payment per hit.

-- Richard




 

News | XML in Industry | Calendar | XML Registry
Marketplace | Resources | MyXML.org | Sponsors | Privacy Statement

Copyright 2001 XML.org. This site is hosted by OASIS