This is the approach has been fixed in Netscape-2.01.
However, I have (unfortunately) been able to reimplement this bug in a new way such that it works with 2.01. (Details, but NOT the example, here, under the 3/18 entry)
With 2.0, when you click on List directory a window will popup with the directory contents, which will be read and displayed below in the results box. Clicking Submit to sends the results box off to a remote host, meaning the results have been ``stolen''.