[Nick Danger]

We interrupt this blatant sidetracking about linux and communism to remind our audience that the "devastating" hole in Internet Explorer still exists, even if Microsoft's public relations contractors would prefer that you talk about something else.

If you are a user of Internet Explorer, you should probably do something about that, like get Firebird or Mozilla or Opera.

Remember, the sooner you give in to godless communism and cut the pins out from under Microsoft, the sooner they'll have to stop sending people into Internet forums to sidetrack the threads that they don't like.

[js1138]

I would be a lot mor impressed if the alleged test actually did what is alleged. What we have here is a bit of code that inserts a null character in the URL string"

<a href="http://www.microsoft.com
%00@secunia.com/internet_explorer_address_bar_spoofing_test/" style="font: 8pt verdana, sans-serif;"> Click Here to Perform Test! </a>

Show me an example of this actually doing anything.

[js1138]

I am somewhat at a loss as to why this is considered such an unfixable problem. One line of code that terminated the URL string at the first null character would do the trick.

Besides, if you click on a link that downloads a file, you will be asked what to do with the file. That would be a clue that something is wrong.