Besides Malicious Intent - Other Reasons To Disable ?
Nov 11, 2009Besides malicious intent, why would someone disable javascript for general web browsing?
View 24 RepliesBesides malicious intent, why would someone disable javascript for general web browsing?
View 24 RepliesI have some value from textarea id the use is not direct type in the textarea , but copy their type from some where them the format get change , a lot of empty space is create, the the pop up message become confuse, How can I deal the situation like this.
Quote:
I am trying to implement my script into Wordpress but for some reasons it just doesn't simply work. And whenever I try to test it online, it doesn't work either.Only when I'm offline does it work.[code]
View 3 Replies View RelatedAIUI, it was not all that long ago when the threat to personal users,
was attachments that when executed compromised machines with keyloggers,
trojans, etc.
Now it seems that the big problem is reading a webpage or an HTML e-mail
and getting affected through the scripting. My understanding is that
the script downloads the malicious program from the web and sets it to
run on start up through the start-up folder or in the registry.
I don't know much about this; can someone suggest a good web site to
start learning a bit more about these threats. I have googled, but I am
not quire sure of the best search terms, and since there is so much
information out there, a site that experienced people endorse would be a
lot of help.
In particular, it seems as if JavaScript dowloading a trojran without
the user clicking an attachment is a big problem.
I have a website that allows users to enter complex mathematical formulas into a text field and evaluates them.
I am currently using eval() because it not only can handle all the standard mathematical functions, but also gives them access to the Math object. That way the users can use functions such as Math.max() and everything else.
I realize, though, that using eval is evil, I assume because a malicious user might throw in some more damaging javascript that would be run without checking it. (That's why eval is evil, right?)
Is there a way that I can allow my users to construct complex mathematical formulas and use the Math object (or an equivalent) without potentially opening my site up to harm?
So today I have discovered some malicious JavaScript code inserted into a bunch of my pages on a webserver. Access to these pages through FTP is granted to 3 people, myself, my boss, and a contract programmer. Unfortunately, the FTP server wasn't set to log, so I can't tell for sure if it was the programmer, but my assumption and suspicion is that it was him.
This code was inserted at the bottom of multiple pages. I can't make heads or tails of it, but it cannot be good, whatever it is. When I view the page that it was on, I noticed the web browser connecting to [url]. Browsing to this page takes you to some foreign hosting site. Googling superseasilver.ru only provides a page that has this address listed in a blacklist.
Code below:
Can a plugin stop some malicious scripts to be executed?
Say, i have my plugin installed in my browser. Can this plugin go through the html contet of the site and stop the execution of activeX, action scripts, flash, pdf anything like that?
This article was just published on [URL].. As I read it this is about a new twist to an old issue. (see excerpts below) 1 - I thought JavaScript was in a "sandbox" and prevented inappropriate access to the local machine. Is this no longer true?
2 - More to the point: Can or are any modifications to JavaScript be done by the JavaScript development team... who ever that is (Oracle?)... to fix what ever JavaScript vulnerabilities are being exploited?
3 - Are there other defenses for the client machine other than those mentioned in the excerpt below? (Turn off JavaScript in their browsers, etc.) 4 - If there is no vigorous response to this by the JavaScript development team how can we continue to create apps with JavaScript as such will encourage people to simply turn off java script in their browsers and that will encourage other web developers to simply not use JavaScript on their sites.
5 - Is Oracle the "owner" or "keeper" of javascript? I looked on the Oracle Forums and saw no forum for javascript. If not Oracle who is addressing issues like these?
Article Excerpts: More recently still, the spammers started embedding the JavaScript inside the HTML file (rather than as a simple file attachment), to spread the horrible Zeus banking Trojan.
"So yes, a seemingly innocent HTML email attachment can do plenty of damage, and while quite stealthy, definitely not harmless," concludes Barracuda Labs' researcher, Dave Michmerhuizen. The only defenses against this sort of attack are either for it to be filtered at the gateway so it never reaches the user, or for the user to disable JavaScript in their browser. Security software on the PC might catch the exploit.End Excerpt.
The javascripts files in my website are constantly getting injected with malicious codes which redirects my website
View 2 Replies View RelatedHow can I disable my div?
Code:
I know you can make hidden/visible but don't know if you can disable it?
I find I cannot disable javascript in MSIE 6 I've Help'd, Google'd, and searched here to no avail.
<noscript>
You don't have javascript enabled
</noscript>
will not display for me.
I am trying to disable the F5 key in Mozilla. I have the next code in
javascript that it is working in Internet Explorer but it is not
working in Mozilla. how can I disable the F5 key in Mozilla?
<script>
document.onkeydown = function(){
if(window.event && window.event.keyCode == 116){
window.event.keyCode = 505;
}
if(window.event && window.event.keyCode == 505){
return false;
}
}
</script>
I have a div which includes many others tags (a, input, any others
links). How can I disable the whole div? I want to any of the included tags may
not be enable.
I have a perl cgi form that has a popup_list. Based on a value that
is coming in from a database query, I want to either
1) display the value (from the databse) and let the user change it;
OR
2) display the value (from the database), but NOT let the user change
it.
I tried using javascript to disable the popup list, and that works,
except the form "loses" the value of the entry in the popup list.
Maybe "disable" is not the correct property I want to use. If that is
the case, what is it?
What's the best way to display an image, disabling the user's ability to right-click on it?
I believe you have to use <body oncontextmenu="return false">. Would the
following work?
var x = "<head></head><body oncontextmenu="return false"><img src='temp.jpg' border=0></body>"
top.document.open()
top.document.write(x)
top.document.close()
Since this is a frameless site, I don't think this would work, at least
would never get to the close()...
I want to test/proof some <NOSCRIPT></NOSCRIPT> stuff in my page via PHP but can not figure how to disable JavaScript on my browser.
View 2 Replies View RelatedI have a table (created at runtime) that in same circumstances have some <td> empty.All <td> have this css:
[Code]...
Via firebug console (with a bookmark) I see that line 4 is executed but nothing happen. I have tried to add a style="display: none;" via firebug to these <td> and it works.
<div class="jcarousel-skin-ie7">
I'm trying to change disabled to true. It's not taking. And what I also don't get is what is disable doing for a div?
I have tried this:
I have a form with pairs of checkboxes. When one is checked then I want to enable the other checkbox for that pair, and disable when unchecked. I can get this to work when I have a separate function for each pair, but not if I try to use one function and pass the id of the element.[code]
View 2 Replies View RelatedI want to disable my text box using java script.Here "a" is the line number where change dynamically
var remarks="remarks"+a
var remarks_1=document.getElementById(remarks)
document.f_update.remarks_1.disabled== "true";
f_update is the form name.It is not working..
I have a form with a number of checkboxes. The 1st one is "Select All". When this checkbox is ticked I would like to disable all others. When the "Select All" checkbox is unticked, all checkboxes should be enabled.
View 5 Replies View RelatedIs it possible to disable all scripts within a certain div? Like if I was displaying something in <div id="member"> and a member posts a script within that div, I would like it to not work.
View 13 Replies View RelatedI have been looking for a good walk-through online, but can't seem to find an exact resolution to what I am trying to do.
Supply some example code for not displaying everything that is inside a <div>. Basically I do not want social media content to be displayed on secure pages, but want them on every other page.
This is what I have:
<div id="share">
how to disable the restore down button in internet explorer through java script.
View 1 Replies View RelatedSo I have a form that lets me choose one of three templates to submit with. Each template is inside a <fieldset> tag. What I'd like to do is call disable ('fieldsetID') and have it disable the fieldset and all form fields inside it... I _thought_ disabling the fieldset would do that for me, but apparently not. Code:
View 3 Replies View RelatedI would like to find out how to disable textbox from user entry. I have a form that consist of 2 portion (header and details). The detail portion has multiple rows(where I use a for loop) . All the rows should be disabled upon loading. The first row is open for entry only when all the header fields are entered. Subsequent row is open for entry when the 1st row is entered and so forth. I called an external javascript function to disabled all the fields in the form but somehow give an error - undefined.
View 3 Replies View Related