It's always been a mystery to me why anyone should think that the following HTML anchor should have any legitimacy:
<A HREF="url.b"> url.a </A>
This is where both A and B are URLs complete with schemes, but where the hosts are completely different. I'm sure we're all familiar with lots of other scenarios where this trick is attempted but detection is likely to be beyond the abilities of an automated ESA. However, I've seen more than enough examples of this simple form to think that it could be of advantage to us.
If you can think of any reasons why such a rule available as an option in the hands of our less experienced peers could be a bad idea, by all means please add to this discussion.
If on the other hand you believe that the request has worth, please write to your reseller or in your capacity as a reseller please contact Cisco endorsing CSCve04213.
