Blog ≫ 2003 ≫ Javascript snooping

Someone's been playing at posting javascript on my board, I thought it was all covered, it's not so I have some javascript snooping links 1 to follow up, see what can be done... Should have stopped saving the password as a plain text cookie a long time ago!

<img onload='document.alert("hey");' alt=js>
<img onload='function test(){alert("hey");} test();' alt=js>
<img onload='function yo(){alert("title: " + document.title + ", cookie: " + document.cookie);} yo();' alt=js>
<img onload='function yo(){alert("hey");} yo();' alt=js>

None of those images do anything here, but maybe they do in other browsers...

  1. Removed old gossamer-threads.com/forum/General_C8/Internet_Technologies_F37/Take_the_Anonymizer_Snoop_Test..._P209324/ link here.

💬 looks like that works in IE!

⬅️ :: ➡️

Paulʼs blog - I live near Folkestone, Kent. Married + father to 2, I am a full stack web engineer, + I do js / node, some ruby, other languages etc. My hobbies are pubs, parkrun, restaurants, home automation 🤖 and other diy jiggery-pokery, history, tree stuff, TV, squirrels, pirates ☠️, lego, + TIME TRAVEL.