Re: disk:// and help:// security problems
Re: disk:// and help:// security problems
- Subject: Re: disk:// and help:// security problems
- From: "Michael Rothwell" <email@hidden>
- Date: Tue, 18 May 2004 08:04:34 -0400 (EDT)
>
> ...I am not sure that this "feature" can be easily disabled...
>
>
Perhaps I've misunderstood something, but I believe it is fully
>
sufficient to remove the Help Viewer $#%#$%$^# as a help: scheme
>
handler (e.g., as the original discussion proposes, replacing it by
>
Chess ;)).
This is the working work-around. You can replace the help: handler with
anything you want. Chess is amusing, textedit will show you the text of
the attempted exploit script, etc. The important thing is to replace the
handler, not delete it or the help app.
It's just a work-around, though. I would like to see Apple step forward
with a real fix. Or at least an acknowledgement and statement of the
work-around. Something public.
--
Michael Rothwell
email@hidden
_______________________________________________
cocoa-dev mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/cocoa-dev
Do not post admin requests to the list. They will be ignored.