A warning to proxy writers

[Adam Langley]

On 4/21/05, Roger Dingledine <arma at mit.edu> wrote:
> This is a nice list. Can you confirm that common browsers will
> automatically load a ftp:// image link? If so, we should really
> consider how to deal with that. :}

The easy way to test it to create a HTML file with:
  <img src="ftp://127.0.0.1/something" alt=""/>
and have netcat listen to port 21.

(Note that you have to type "200 ok"<enter> in order to get the
browser to start the FTP conversation. Maybe strace the netcat and
watch for accept() )

Confirmed with:
  * Firefox 1.0.3


AGL

-- 
Adam Langley                                      agl at imperialviolet.org
http://www.imperialviolet.org                       (+44) (0)7906 332512
PGP: 9113   256A   CC0F   71A6   4C84   5087   CDA5   52DF   2CB6   3D60