Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'How to avoid the new 'Help' URL handler vulnerability' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
How to avoid the new 'Help' URL handler vulnerability
Authored by: clindberg on May 19, '04 05:43:53PM
AppleScript itself is used to message an application to accept a URL. You need to have a GURL handler declared in your application's scriptSuite (possibly requiring the name "GetURL"; I'm not sure). Therefore, only real applications that have applescript enabled (and a GURL handler) can be the helper for a URL scheme.

You can use my RCDefaultApp pref pane (as mentioned in a previous reply) to just disable a URL scheme. The internal implementation is to assign it to a simple do-nothing application, which does declare a GURL handler.

[ Reply to This | # ]