View Full Version : Change the URL Displayed in the Address Bar
Basscyst
02-27-2004, 11:42 PM
I have a JS application \ HTMl page that runs off a shared network drive. Is there a way to change the displayed URL in the address bar so that the end user can't see the exact path to the network drive?
TIA,
Basscyst
I think browsers dont allow such a thing because it can lead to malicious attempts to steal user data.
For example, some site may change the address in the addressbar to www.hotmail.com and attempt to steal your hotmail account password!
Basscyst
02-27-2004, 11:51 PM
Hmm, By recreating an identical page for you to enter your user name \ password into? I see how that could cause problems. I'll just have it not display the address bar, far from fail safe but adequete.
Thanks,
Basscyst
Willy Duitt
02-28-2004, 12:25 AM
There is a vulnerbility in IE in which allows you to hide the real location of the page by including a non printing character (%01) before the "@" in the URL. (would not depend on the longevity of this tho)
<button onclick="location.href=unescape('http://www.microsoft.com%01@netscape.com')">IE Exploit</button>
.....Willy
vBulletin® v3.8.2, Copyright ©2000-2012, Jelsoft Enterprises Ltd.