RE: webmail vulnerabilities: a new pragma token?

On Wed, 19 Jan 2000, Josh Cohen wrote:

> 
> I see your problem, but I dont think pragma is 
> the right place for a solution.
> As a matter of fact, I dont think HTTP is the place
> for your solution.  Why not just stick a meta tag
> in the HTML itself ?

Because that means parsing and modification of the HTML.  Doesn't scale to
any future content type ... I for one prefer security features out of band
to the channel or in this case processing layer of the client.

But I'm not sure this is a complete solution as proposed in any case. At
what point does not having scripting enabled prevent reasonable rendering
of the content?  Should plugins be enabled? What about content within
frames (or iframe) within the file which reference other servers? Meta
refresh tags which redirect to new content?

Dave Morris