Security Issues

Be aware of these known JavaScript vulnerabilities. Most either are fixed in 2.01 or will be fixed in Netscape Navigator 3.0 (code-named "Atlas").

Directory entries

A list of file names (not contents) can be "stolen" by a malicious script. Reference: www.c2.org. [Fixed in version 2.01]

E-mail/identity

The user's e-mail address (set in Options/Mail and News/Preferences/Identity) can be stolen. Mail can be sent from the navigator by a malicious script. [Fixed in version 2.01.]

Small, persistent windows

A small persistent top-level window that cannot be seen can spy on you. Reference: loVerso's Page.

JavaScript cannot be disabled

[Fixed in 2.01]



Copyright ©2000 by Charles River Media, All Rights Reserved