[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Repository URLs on web page

From: Nick Gilbert <nick_at_x-rm.com>
Date: 2006-05-02 11:55:43 CEST

Lübbe Onken wrote:
>> Try that in IE (or better yet: IE7). It won't work.
>
> I knew that some crappy software was the reason for not using these URLs.
> How about redirecting people with IE to spreadfirefox.com ;-)

You make it sound like they've done something wrong. Usernames in URLs
was explicitly removed from IE in a "critical update" to improve security.

Too many people were being duped by URLs such as this:

http://www.ebay.com@%12%34%34%69<blah>/file.asp

If you make the username look like a hostname, and encode the real URL
then it makes phishing FAR too easy. I'm quite glad they removed it.
Putting usernames and passwords has to be the stupidest idea that's
still part of a standard. I think you'll find Firefox and other browsers
follow suit.

Nick...

-- 
________________________________
Nick Gilbert, Software Developer
X-RM Limited, Winchester, UK
W: http://www.x-rm.com/
E: nick@x-rm.com
T: 01962 877237
F: 01962 842346
________________________________
Received on Tue May 2 11:55:57 2006

This is an archived mail posted to the TortoiseSVN Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.