• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: Sorry
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Sorry


  • Subject: Re: Sorry
  • From: Martin Orpen <email@hidden>
  • Date: Thu, 01 Jul 2004 23:48:26 +0100

on 1/7/04 7:41 pm, Charles Arthur at email@hidden wrote:

> Hmm, very interesting. Doesn't auto-run. But one could imagine that you'd
> only have to change the thing you had in the window to ".app" and it would.
> (Might it?)

No.

This isn't some weird voodoo or malicious hack. The "applescript://" scheme
is described here:

http://www.apple.com/applescript/scripteditor/12.html

I saw it a couple of months back and thought it was interesting.

Today, I was experimenting with a couple of URL protocols and thought I'd
try to see if any of the URL redirection services would accept a URL with an
"applescript://" prefix.

My favourite service ShorterLink.com would not accept the URL as it adds
"http://"; to any urls that don't already include this.

The reason that it is my favourite redirection service is that it allows you
to see the destination URL before taking you there - which is important
nowadays.

My second favourite redirection service accepted the applescript:// prefix
without a problem.

Depending on your POV this could be a good or a bad thing - I think that is
pretty good because:

Being able to distribute scripts using short URLs that don't break in emails
or Usenet posts is a good thing.

Being able to distribute URLs without having to make up web pages and store
them on a web site that you have to pay for is another good thing.


> Faintly scary. I thought it was just the Windows users who were meant to
> get things popping up on their machine when they clicked a link.

The fact that it opens script editor may be a bit shocking, but it can't
compile or run the script.

And as for popping stuff up when you click a link, you've been able to do
that ever since the file:// scheme was introduced - here are a couple I
prepared earlier...

This should resolve to 127.0.0.1:

http://tinyurl.com/30j9

This should open a Finder window at /var/log and highlight the system.log
file:

http://tinyurl.com/3885n

This one will tell you that your machine has been hacked and show the
contents of your hostconfig file:

http://www.tristimulus.co.uk/hackIt/

It's bullshit of course, but you can easily get local data into a browser
frame using local URLs like that.

Regards

--
Martin Orpen
Idea Digital Imaging Ltd -- The Image Specialists
http://www.idea-digital.com
_______________________________________________
applescript-users mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/applescript-users
Do not post admin requests to the list. They will be ignored.


  • Follow-Ups:
    • Re: Sorry
      • From: Dave Balderstone <email@hidden>
References: 
 >Re: Sorry (From: Charles Arthur <email@hidden>)

  • Prev by Date: Re: Need help with finding first of the month
  • Next by Date: Determining when an app has quit
  • Previous by thread: Re: Sorry
  • Next by thread: Re: Sorry
  • Index(es):
    • Date
    • Thread