Web Archive (file format): Difference between revisions

Content deleted Content added
m Minor changes for clarity
m Move section
Line 36:
 
* The [[WebKit]] framework's WebArchive class is used to simplify cutting-and-pasting with whole or partial web pages.<ref>{{cite web|title=WebArchive Class Reference|url=https://developer.apple.com/library/mac/documentation/Cocoa/Reference/WebKit/Classes/WebArchive_Class/index.html|website=Mac Developer Library|publisher=Apple|accessdate=7 February 2015}}</ref>
 
== Converting for other browsers ==
Workarounds to allow the file to be viewed in other browsers are possible, though specific webpage contents may hinder this process. This requires the using one of the free tools [[WebArchive Folderizer]] (for OS X 10.2 and higher)<ref name="folderize"/> or [[WebArchive Extractor]] (for OS X 10.4.3 and higher).<ref>[http://robrohan.github.io/WebArchiveExtractor/ WebArchive Extractor]</ref>
 
== Vulnerability ==
In February 2013, a vulnerability with the webarchive format was discovered and reported by Joe Vennix, a [[Metasploit Project]] developer. The [[exploit (computer security) | exploit]] allows an attacker to send a crafted webarchive to a user containing code to access [[HTTP cookie | cookies]], local files, and other data. Apple's response to the report was that it will not fix the bug, most likely because it requires action on the users part in opening the file.<ref>{{cite web|last1=Vennix|first1=Joe|title=Abusing Safari's webarchive file format|url=https://community.rapid7.com/community/metasploit/blog/2013/04/25/abusing-safaris-webarchive-file-format|website=Rapid7 Metasploit|publisher=Rapid7|accessdate=7 February 2015}}</ref>
 
== Converting for other browsers ==
Workarounds to allow the file to be viewed in other browsers are possible, though specific webpage contents may hinder this process. This requires the using one of the free tools [[WebArchive Folderizer]] (for OS X 10.2 and higher)<ref name="folderize"/> or [[WebArchive Extractor]] (for OS X 10.4.3 and higher).<ref>[http://robrohan.github.io/WebArchiveExtractor/ WebArchive Extractor]</ref>
 
== Alternatives ==