Serious privacy leak in Python for Windows

Max m maxm at mxm.dk
Wed Jan 16 14:32:05 EST 2002


Richard M. Smith wrote:

> For example, the following Python code on a Web page will run
> successfully:
> 
>    <SCRIPT language=python>
>    import __builtin__
>    myfile = __builtin__.open("c:\\autoexec.bat")
>    document.write(str(myfile.readlines()))
>    myfile.close()
>    </SCRIPT>


The obvious and simple solution could be to not surf the web from the 
server using IE. There are many other browsers available which don't do 
embedded activeScripting.

This is but one of the reasons that I use mozilla for browsing.

regards Max M




More information about the Python-list mailing list