Even a fully patched and up-to-date version of IE 6 contains at least 22 discovered vulnerabilities IE 7 stands at 9 and IE 8 at 2. Washington Post's Brian Krebs reports on the Security Fix blog "Internet Explorer Unsafe for 284 Days in 2006". This is not news, yet there are people unaware of the danger posed. The reasons behind this range from the hassle of dealing with Windows Update, millions of machines without a valid license which cannot access updates and users not realizing the importance of having up to date software. If(browserUtility.isIE()||browserUtility.I substantiate that statement by citing the Google Analytics on my blog - there are still people using old, un-patched and therefore vulnerable versions of Internet Explorer. The JavaScript code below would, after building the anchor tag and adding it programmatically to the form as a hidden link, automatically “click” the hidden link, which would download the contents of the href attribute as an EML file, which would open in Outlook just as the ActiveX control did.įunction(oContent,sSubject,sTitleHTML,sEmailLogEntryID) A MIME file type that can be used for this is EML. Though any file format can be placed here, only one that would cause an Outlook email to be generated would work for this purpose.
The link would use the download attribute, which would cause the data stored in the href attribute to be downloaded as a file. I discovered quickly that this wouldn’t work, as there are limitations on how long a query string can be, and that limit is around 2000 characters if the URL is to be compatible with most browsers.Īn article on Stack Overflow pointed me in the right direction: creating an anchor tag with all of the data in the href attribute, but not to be used in a GET request. Initially, I thought about building an anchor tag that would store all the email data in the URL in the query string and use an HTTP GET request to send it to the server. When a user clicked the link that called this function, the Outlook.Application ActiveX control would open a new HTML email in Outlook containing all the text, including URLs, from the shared log entry. Var outlookApp = new ActiveXObject("Outlook.Application") Var sContent = buildPrintHTML(oContent,sSubject,sTitleHTML,"email")
0 kommentar(er)
