Comments (3)
This is due to a race condition between when DOM Snitch can properly traverse
the DOM tree (where everything is done via JavaScript without interacting
directly with any debug functionality in the V8 engine) and inline JS being
executed as part of parsing the HTML document. This is a known pain point and
there are active development works to address this sort of things. Stay tuned!
Original comment by [email protected]
on 9 Jul 2011 at 7:38
- Changed state: Accepted
from domsnitch.
Thanks for the fast reply, and great work on DOMSniff keep it up!
Original comment by [email protected]
on 12 Jul 2011 at 4:51
from domsnitch.
The detection problem should be addressed in 0.717. However, there is more to
be done in determining if it is exploitable.
Original comment by [email protected]
on 1 Sep 2011 at 8:12
from domsnitch.
Related Issues (20)
- Hyperlinks / Anchors Broken HOT 2
- Removing Domsnitch from Chrome HOT 2
- DIV style popups containing form elements disappear when the mouse focuses on the popup and form HOT 1
- DOM Snitch Javascript events from blocking default action (link rewriting, etc) HOT 3
- DOM Snitch immediately crashes on start/reload HOT 4
- DOM Snitch redirects to empty url when referring to anchor HOT 2
- $('#logo').fadeOut(500).fadeIn(200).fadeOut(200).fadeIn(200).fadeOut(200).fadeIn(200); HOT 2
- [deleted issue]
- [deleted issue]
- False Negative in innerHTML example HOT 7
- Export Record - No Output Seen for txt/doc HOT 10
- DOM Based xss via Cookie isn't exploitable HOT 1
- DOM Snitch seems to call itslef Untrusted code HOT 3
- ASP.NET Webforms Quirk
- Domsnitch fails to load properly on Chrome version 23.
- <td><img src="img/spacer.gif" width="1" height="25" alt="" /></td>
- DOM Snitch Content Scripts Appear to Leak Memory
- DOM Snitch not stable with a number of commercial websites -- especially with frames
- ""><img src=x onerror=prompt(/x/);>>
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from domsnitch.