OSX 10.3 [Panther] service announcement
May. 19th, 2004 01:25 am![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
jazzfishDoubtless those of you to whom this applies have seen it already, but just in case you haven't, there's a security hole in Panther that wants patching.
"It is possible to write a URL that, when invoked from one’s default browser, invokes Apple’s Help program, which is itself a mini-browser which uses a subset of HTML. The trouble is that unlike a well-written, full-fledged, OSX browser, the Help program is (a.) fully scriptable; and (b.) fully capable of running any application or command for which the user has privileges."
"It is possible to write a URL that, when invoked from one’s default browser, invokes Apple’s Help program, which is itself a mini-browser which uses a subset of HTML. The trouble is that unlike a well-written, full-fledged, OSX browser, the Help program is (a.) fully scriptable; and (b.) fully capable of running any application or command for which the user has privileges."
