RSnake is a fucking genius. Using a file:/// URL pointed at the manual PDF installed with Acrobat, you can execute JavaScript in the local zone. Oh yeah, local file access, program execution, completely uncrippled XmlHttpRequest. This is not good. [Yeah, I went ahead and removed the PDFs from thesupernicety, just to be safe. Fortunately, there weren't many. Some people are super boned. -k] It hits the fan! |