You are using Netscape 2.02 for Windows. These release notes cover:
Netscape has implemented fixes to the portions of our software
containing the following problems and reviewed them with outside experts.
A user's email addresses could have been inadvertently exposed to
individuals without the user knowing it, compromising the user's
privacy. Netscape Navigator 2.02 solves this privacy problem by
limiting JavaScript's ability to automatically post mail or news from
form elements. This ensures that user interaction is required to send
mail or post news messages.
Another feature of JavaScript is the ability for a server script to
list files and directories. Due to an implementation problem in
Netscape Navigator 2.0, a privacy concern existed because it was
possible for a server script to access the listing of local file
names and directories on the user's machine. This problem did not
allow the server to see the contents of any local files or modify
local files in any way. Navigator 2.02 fixes this problem by refusing
to allow a script from a server to view file names and directory
listings from the local user's machine.
Also: The document.close() method now works properly. Fixes have been
added to prevent semi-automatic file uploads.
A problem has been fixed where, previously, under some circumstances
the ClassLoader allowed derived classes access to native methods.
At sites where the firewall prevents DNS info from passing onto their
intranet, Navigator was failing to load applets (Java exception was
thrown). The fix allows the applet to load, but then prevents the
applet from trying to make a socket connection to its "home" host
(since the IP address was not pre-verified).
A problem has been fixed where showDocument() malfunctioned when a
server provided a location redirect to an alternate.
2.02 fixes a problem where it was possible for a Gopher URL to be used
to send commands to ports other than those that were reasonable for
the Gopher service. It was possible that this feature could be used
to exploit other security vulnerabilities behind firewalls. Navigator
2.02 fixes this problem by limiting the ports that a Gopher URL can
access and by disallowing certain control characters in a valid
Gopher URL.
The document information windows now provides security information for
all pages, including pages retrieved from the memory cache.
Previously, when you viewed document info from pages retrieved from
memory cache, you saw "Security: Unknown".
The Navigator is able to correctly compare the age of a document on the
server with the corresponding document in your cache,
even if the documents are in different time zones or on oppposite sides
of a daylight savings / standard time boundary.
In other words, the reload button works, now.
You will see the lastest copy of the document when you hit reload.
See the
on-line JavaScript Documentation.
See the handbook
for more information about using and creating plug-ins.
This list always contains one entry that is an asterisk (*). This is a
default plug-in that has been registered for all MIME types that are not
intrinsically handled by the Navigator.
Netscape comes with a sample mail message. Click on the "inbox" folder
to see the message. You can use the toolbar button or menu to Get
New Mail. You can navigate through your mail messages by clicking on
the "Date", "Sender", or "Subject" fields of the message list pane.
The buttons and Go Menu also help you navigate. A bold message in
the message list signifies that you have not read this message yet.
Once you read it, it becomes normal (i.e. unbold).
Add Users from the Address Book Window's Item Menu, or automatically
create an entry from the Message Menu in the Mail or News window.
Do you have lists of people to send mail to? In the Address Book
window, mailing lists are represented by the folder icon. Add
list entries from the Address Book Window's Item menu, then drag
and drop individual users into the list/folders.
You can use these List and User entries in three ways.
You can type the nicknames into the mail composition window in the
To:, CC:, and BCC: fields. You can also double-click on an icon in
the Address Book window to bring up a pre-addressed composition window.
Here's the whole story in a new window.
The syntax for the targeted windows is:
<A HREF="../../2.0/relnotes/url.html" TARGET="window_name">
Click here and open a New Window</A>
A new BASE tag allows you to pick a default named target window for
every link in a document that does not have an explicit TARGET
attribute. Its format is:
<BASE TARGET="default_target">
With server-side image maps, the x,y coordinates of the click
are sent to the server, and the server decides which URL you see.
With client-side image maps, the MAP that relates parts of the
image to different URLs is stored in the current file.
This saves a round trip to the server, and should present documents
to you faster. Since the MAP information is stored in the document
you are viewing, the destination URLs can be displayed in the status
area as you pass the mouse over the image map. Try the
client-side image map at the bottom of
this page.
Now you can specify "Automatic Dithering" and Netscape will make the
decision to dither or not for each image on the page. In general, your
images should look better with automatic dithering. The old options
are still there, so if you want to set them yourself, you can.
The default setting is "Automatic Dithering".
<FONT COLOR="#FF0000">Red</FONT>
You can also use Color Names instead color codes. For Example, the
syntax could also be:
<FONT COLOR="Yellow">Yellow</FONT>
This is also true with the <BODY BGCOLOR="Black" TEXT="White"> tag.
The <SUP> </SUP> tags let you define
superscripts.
The <SUB> </SUB> tags let you define subscripts.
To repair these GIF images, content
providers can read the offending GIF image into a different GIF
utility that conforms to the GIF89a specifications, and save the
image again.
A new "ENCTYPE" attribute on the <FORM> tag allows you to
write forms that take files as input. An example of such a form
would be:
<META HTTP-EQUIV="Content-Type" CONTENT="text/html;
charset=ISO-2022-JP">
Instead of specifying only one proxy per protocol, it is possible to
allow different proxies based on URL wildcard pattern matching.
You can also have multiple proxies to provide
proxy failover support if the primary proxy becomes unavailable
or unresponsive.
The configuration file has the MIME content-type of
We have provided a document describing the syntax for the
Automatic Proxy Configuration URL File Format.
The manual proxy configuration panel is still available.
Just check the appropriate radio button in the Proxy Preferences
panel and enter your proxy and socks hosts.
As before, the default is not to use proxies.
Netscape Navigator uses random information to generate
session encryption keys. The random information is found
through a variety of functions that look into a user's machine
for information. Previous releases of Netscape Navigator were
subject to potential vulnerabilities because the size of random
input was less than the size of the subsequent keys. This means
that instead of searching through all the 2^128 possible keys by
brute force, a potential intruder only had to search through
a significantly smaller key space by brute force. Netscape
Navigator 2.0 incorporates fixes to the specific portion of our
software where this potential vulnerability existed. We
have significantly increased the amount of random information from
approximately 30 bits to approximately 300 bits. Netscape
has greatly expanded the techniques and sources used to generate
these amounts of random information and the fixes have been
reviewed and validated by several weeks of intensive testing
on the Internet.
On Windows, LVIEW31.EXE (for images), MPEGPLAY.EXE (for MPEG movies),
and WHAM.EXE (for audio files) are all useful applications. One site
where these can be found is
ftp://ftp.cica.indiana.edu,
but that site is often difficult to reach. You can also try the mirror site on
ftp://gatekeeper.dec.com/pub/micro/msdos/win3/.
SECURITY IN
2.02
WHAT'S
NEW?
Java Applets
Support for Java Applets:
JavaScript
Plug-ins
Read Mail with Netscape
Navigator
Brand new News Interface
Message Composition Window
Address Book for Email Addresses
New Bookmarks Feature
Better Images and Document Presentation
<FONT COLOR="#00FF00">Green</FONT>
<FONT COLOR="#0000FF">Blue</FONT><DIV ALIGN="left">
Left justify text by putting it
within the DIV tags.
</DIV><DIV ALIGN="center">
Center some text by putting it
within the DIV tags.
</DIV>
<DIV ALIGN="right">
Right justify some text by putting it
within the DIV tags.
</DIV>
User Interface Changes
Access Improvements
<FORM ENCTYPE="multipart/form-data"
ACTION="_URL_" METHOD=POST>
Send this file: <INPUT
NAME="userfile" TYPE="file">
<INPUT TYPE="submit"
VALUE="Send File">
</FORM>International Support
"us-ascii", "iso-8859-1", "x-mac-roman", "iso-8859-2", "x-mac-ce"
"iso-2022-jp","x-sjis", "x-euc-jp",
"euc-kr", "iso-2022-kr",
"gb2312", "gb_2312-80"
"x-euc-tw", "x-cns11643-1", "x-cns11643-2", "big5"
META Tag Extension for MIME Charset Info
Document Encoding User Interface
Automatic Proxy Configuration
application/x-ns-proxy-autoconfig
and is written in JavaScript.
SECURITY
IMPROVEMENTS
Details: Some of the system
specific information that is used in the seed generation
is available to any user on that system.
Details: Some of the usefulness of the seed generation
depends upon the unpredictability of the low order bits
of various clocks and timers. The clocks of many emulators
may have much less entropy than the actual built-in clocks.
Details: If the attacker is monitoring your user input
then its randomness is not useful.
Details: While navigating through menus or typing into
various form fields, the Navigator uses the unpredictability
of details of the user actions to increase the entropy of
the RNG state.
HELPER
APPLICATIONS
KNOWN
PROBLEMS/BUGS
Navigator Problems:
JavaScript Bugs:
Java problems with the 32bit Navigator:
Known bugs in International Support.
Help | Site Map | How to Get Netscape Products | Advertise With Us | Add Site | Custom Browser Program
Autos | Business | Computing & Internet | Entertainment | Family | Games | Health | Lifestyles | Local | Netscape | Netscape Open Directory | News | Personal Finance | Real Estate | Research & Learn | Shopping | Small Business | Sports | Travel
© 1999 Netscape, All Rights Reserved. Legal & Privacy Notices
This site powered by Netscape SuiteSpot servers.