"when you send data to the internet" warning without having entered data

  • Thread starter Thread starter jay
  • Start date Start date
J

jay

I have Explorer set to pop-up a warning dialog box before sending data to
the internet. This is supposed to happen after I've entered data in an
entry field. Sometimes I find that a website will cause explorer to
generate this warning even though I did not enter any data. I find this
spooky/disturbing, because I have to say "yes" to the warning dialog if I
want the website to display, and I don't know what was being sent.

Here is one of the websites that does this:

http://www.wamu.com/personal/newaccountchoices/newaccountchoices.asp


Why does the warning message pop-up? Is it only sending the name of the
referring web page, or is it secretly sending personal information behind my
back?

Here is what I think is the source to that site:


<html>
<head>
<noscript>
<meta http-equiv="refresh"
content="0;url=/personal/newaccountchoices/newaccountchoices_NJ.htm">
</noscript>
</head>
<body>
<script language="JavaScript1.2">
<!--
document.writeln('<form name="frmSSRedirect" method="post"
action="/personal/newaccountchoices/newaccountchoices_NJ.htm' +
document.location.hash + '">');
document.writeln('<input type="hidden" name="hdnReferrer"
value="http://www.wamu.com/home.htm" />');
document.writeln('</form>');
document.forms.frmSSRedirect.submit();
// -->
</script>
</body>
</html>

Thanks,

Jay
 
Hi Jay :-)

I got the page fine. No errors. I have XP Pro Sp2, fully patched.

Jan :)
Smiles are meant to be shared,
that's why they're so contagious.

Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm


">I have Explorer set to pop-up a warning dialog box before sending data to
 
jay said:
I have Explorer set to pop-up a warning dialog box before sending
data to the internet. This is supposed to happen after I've
entered data in an entry field. Sometimes I find that a website
will cause explorer to generate this warning even though I did not
enter any data. I find this spooky/disturbing, because I have to say
"yes" to the warning dialog if I want the website to display,
and I don't know what was being sent.

Here is one of the websites that does this:

http://www.wamu.com/personal/newaccountchoices/newaccountchoices.asp


Why does the warning message pop-up?
Click to expand...

Because of the Post request generated by the submit() that you found.

Is it only sending the name of the referring web page, or is it secretly
sending personal information behind my back?
Click to expand...

Nothing sinister IMO, just some state variables and the Cookie
you picked up from the initial response. Take an HTTP packet
trace to see this.

If you are uncertain about this site you could change Active Scripting
to Prompt and then reply No to prevent this particular action from
occurring. Similarly to really be aware of the site's processing
you could disable Meta Refresh and set Prompt on for Cookies
(via the Privacy tab).


HTH

Robert Aldwinckle
 
Back
Top