[tlug] Re: WWWJDIC backdoor issue

["Jim Breen" <jimbreen@example.com>]

Edward Wright <edw@example.com> wrote:
> On Sat, Jun 16, 2007 at 02:06:41PM +0900, Josh Glover wrote:
> > On 16/06/07, Jim Breen <jimbreen@example.com> wrote:
> >
> > >Yes you are. The "U" is telling the backdoor method the string is in
> > >UTF8, but %B9%A5%A4%AF is 好く in EUC-JP.
> >
> > I wonder why Firefox is sending this in EUC-JP?
>
> Dunno if this applies to your situation or not, but I believe browsers
> submit form contents in the same encoding as the page containing the
> form, tho IIRC this is not a standards requirement.

It's certainly the default, and there's nothing in the HTML standards
to set a form-input-coding.

In my toolbar button-generators (see
http://www.csse.monash.edu.au/~jwb/wwwbuttongen.html) I probe the
current page's coding to create the appropriate backdoor sequence.

For Firefox et al. it's document.getSelection();  Safari needs
window.getSelection();, and the older IEs used
document.frames[i].document.selection.createRange().text;

I wish there was a single standard.   8-)}

Jim
--
Jim Breen
Honorary Senior Research Fellow
Clayton School of Information Technology,
Monash University, VIC 3800, Australia
http://www.csse.monash.edu.au/~jwb/