Re: Microsoft ISA Server HTTP error handler XSS (TL#007)

["http-equiv@excite.com" <1@malware.com>]

> 
> <A href="http://%09%09%09%09%09%09%09 
> 09www.malware.com">http://www.microsoft.com</A> 

The following will represent a true status and a false destination:


<A href="http://www.microsoft.com%09%09%09@%09%09%09%09%09%09 
09www.malware.com">http://www.microsoft.com</A>



-- 
http://www.malware.com