Advanced

An HTML mangling test case

Posted by dave on · 2 comments
NewsForge		Mail this story
Print this story

Last month Michal Zalewski posted to the Bugtraq security mailing list the results of a small experiment he carried out involving feeding randomly generated HTML pages into some of the Web's most widely used browsers. The results were somewhat alarming. All of the open source browsers Michal tested crashed when faced with this kind of input. Only one browser stood up well against this type of stress test. Which one? A round of applause please for, er, Microsoft's Internet Explorer.

Full Story

  Nav
» Read more about: Groups: Microsoft; Story Type: News Story

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (2)

TxtEdMacs ·
The security breach is more likely for a browser that runs the mangled code with no complaint. This may be IE's forte, however, it certainly is not to be bragged about!
AnonymousCoward ·
Difficult to say, either way. In the tests I did, on a Windows 2003 Server installation, MSIE crashed very rarely but one crash did take out the whole OS (at which point I stopped testing rather than annoy the machine's owner), but I've not done that (or even mortally offended X) with any of the FOSS browsers. This would seem to be a vote for your point, but as well as masking difficulties with the code, MSIE may well be actually dodging some classes of bullet quite well.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post