News flash: MSXML6 breaks stuff

I should be used to this.  Really, I should.  It is just SO easy to make bad assumptions about Microsoft software when you are coding.  Take MSXML6 ... please!  (That's my best Dangerfield, I swear!)  They added a XMLHttpRequest class, which Netscape has supported forever.  My inherited Learning Management System has this conditional:

if (window.XMLHttpRequest) 

{ 

          //assume Mozilla 

}else{ 

          //assume Microsoft 

} 

Now, this code is just there to help determine if the ActiveX control should be used, but of COURSE the original developer leaned on it later for all SORTS of stuff.  So, when MSXML6 came out, with its juicy new XMLHttpRequest object, the conditional assumed Mozilla, and, well, hilarity ensued.

Who the heck is Bill Sempf?

Bill Sempf

Husband. Father. Pentester. Secure software composer. Brewer. Lockpicker. Ninja. Insurrectionist. Lumberjack. All words that have been used to describe me recently. I help people write more secure software.

I'm speaking at Black Hat Europe

TextBox

INETA Community Speakers Program

TextBox

profile for Bill Sempf on Stack Exchange, a network of free, community-driven Q&A sites

EFF Member 2013

Month List

TextBox

Paying the bills

 

TextBox