-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hassan,

On 3/10/2010 10:50 AM, Hassan Schroeder wrote:
> On Wed, Mar 10, 2010 at 7:46 AM, Christopher Schultz
> <ch...@christopherschultz.net> wrote:
> 
>> Just for the sake of mental mast... er, fun! you could write a
>> javascript event handler that ...
> 
> ..would work until the user switched off JavaScript?  or kicked off `wget`
> with the image URL?  :-)

Well, I did suggest checking the REFERER (easily forged) and I said
this, too:

> All technological tricks are bound to take you a lot of time and not
> cover all possibilities, so just forget it.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkuXxgYACgkQ9CaO5/Lv0PB1DwCgoLyMhgtL4ynEcdhP6tSxOrt5
OyAAn3DWm8BBzOblHVremeyBuKUpAp2i
=DR4U
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to