|
|
|
UER Store
|
|
order your copy of Access All Areas today!
|
|
|
makman
Location: Rochester, NY Gender: Male Total Likes: 0 likes
I live alone with a criminal
| | | Re: UER Clientside Tools < Reply # 48 on 12/24/2010 3:42 PM > | Reply with Quote
| | | Posted by Avatar-X See, this is why I was against this stuff. Now you have gone too far, makman. Your newest version completely disables all of UER's javascript and then replaces it with a cached copy. This means that, even after XMAS is done, I can't release a new version of any of the JS on my site, because anyone who is still running your extension will see the old JS because it has been overwritten. Your code also inserts UER's javascript onto every page, not just the ones that originally had it. This causes all sorts of other problems. Playing with the XMAS theme is fun. But you've just unconditionally broken the site for all time. -av
|
There's no reason it would kill it for all time. My plan for some time, regardless of what humbug actually does by the end, has been to push an update that does nothing (pretty much just all code commented out or something) shortly after christmas. If you're really pissed enough despite that, I can just that now, though. Failing that, I see what you mean with regards to the cached javascript being inserted in all pages, though- I'll have to look into another approach. Might not happen in time, though, tonight being Christmas Eve.
[last edit 12/24/2010 3:42 PM by makman - edited 1 times]
| Be careful, not safe. "Urbex- so much fun that it should be illegal." |
| makman
Location: Rochester, NY Gender: Male Total Likes: 0 likes
I live alone with a criminal
| | | Re: UER Clientside Tools < Reply # 52 on 12/24/2010 7:18 PM > | Reply with Quote
| | | Ok, I've pushed a blank update (ie, killed the script in the next update), as I probably won't have time to work on it until a few days after christmas. I might fix it to work for myself, but I probably won't publish it, since I just don't have the time right now. Notes to self for next year: - Add in a remote kill switch- maybe a callback to a server I control or something- so that I can shut it off after christmas without relying on people updating - Configurable options for what to turn on/off (eg, mouse stuff, music, background) - Set up a build/push script, as packaging/ftping was getting annoying. - The kill-everything-and-replace-it system was, for the reasons AV pointed out, flawed. There'd need to be a system to gather all javascript content from all pages and store which ones go to which; this is ultimately more complex than a few other options. - Look into the chrome/firefox extension system, and consider something more powerful than content scripts - Try parsing the page in a document_start content script before it's loaded and analyze the code before it's run. - Dynamic analysis of function bodies gets around any eval-related obfuscation, but it becomes boring fight as AV modifies the text of the function and I modify the text analysis. Consider lexing and parsing the bodies by hand, or alternately, screwing with native functions/objects (eg, window.location = "") to prevent redirects or other undesirable actions.
[last edit 12/24/2010 7:27 PM by makman - edited 2 times]
| Be careful, not safe. "Urbex- so much fun that it should be illegal." |
| |
This thread is in a public category, and can't be made private. |
|
All content and images copyright © 2002-2024 UER.CA and respective creators. Graphical Design by Crossfire.
To contact webmaster, or click to email with problems or other questions about this site:
UER CONTACT
View Terms of Service |
View Privacy Policy |
Server colocation provided by Beanfield
This page was generated for you in 125 milliseconds. Since June 23, 2002, a total of 739685893 pages have been generated.
|
|