Re: OT, but stil...

2014-09-03 Thread Claude Schnéegans
>>They don't call it Malware for nothing Ok, but if a malware does "mal" to a moron client side, in a pinch, this is not our problem, but if it can get pass words so easily, it can also do mal to any server any time. I just got one tonite that allows itself to define cookies under MY domain! I

Re: OT, but stil...

2014-09-03 Thread J.J. Merrick
They don't call it Malware for nothing :-) On Wed, Sep 3, 2014 at 8:11 PM, <> wrote: > > >>so it becomes a part of the client side page request > "against your will" as it were. > > Yes, but this rises a question: > If my window.onerror can get events from some plugin code, this means that > t

Re: OT, but stil...

2014-09-03 Thread Claude Schnéegans
>>so it becomes a part of the client side page request "against your will" as it were. Yes, but this rises a question: If my window.onerror can get events from some plugin code, this means that this code is embeded and is treated as if it belonged to my window. Thus, it has access to everything

Re: OT, but stil...

2014-09-03 Thread Claude Schnéegans
>>"against your will" as it were. Indeed, so I'm considering adding some tests in my "bad bot" detector based on some strings seen in javascript errors. May be also there is a way to get the list of all scripts in a page, I'll dig into that. >>I think your idea is excellent though - a way to

RE: OT, but stil...

2014-09-03 Thread Mark A Kruger
Claude, I think that perfectnavigator is a adware (some would say malware) that runs on browser execution - so it becomes a part of the client side page request "against your will" as it were. I think your idea is excellent though - a way to trap client side errors and tease them out and correct