I-JavaScript PasteJacking

Iziphequluli zesimanje zingasebenzisa i-JavaScript ukufinyelela nokulawula ibhodi lokunamathisela lomsebenzisi, kokubili ukufunda nokubhala. Ubuchwepheshe obuyisisekelo abuyona into entsha, kodwa muva nje kuye kwavela ukuhlaselwa okwengeziwe (okwaziwa ngokuthi "i-pastejacking") ku-inthanethi, okusebenzisa leli khono ukuze kulimaze abasebenzisi abangaqaphile. Ukusebenzisa lokhu ku-JavaScript kulula kakhulu.


Umbhalo olandelayo kuphela ohlanganiswe ohlangothini olunonya:

27670b8ba9840e688369822a3fcfb2d9

Uma ukopisha noma imuphi umbhalo ovela ekhasini elinjalo, intambo engafuneki igcina iphela ebhodini lokunamathisela (kulokhu kusetshenziswa kungakhathalekile umbhalo okopishiwe). Esikhundleni "somyalo omubi" manje usungaqhamuka nezinto eziningi ezimbi. Yonke le nto iba yingozi uma ukuhlukaniswa kolayini ekugcineni kolayini kusetshenziselwa ukwenza ikhodi ngokushesha:

27670b8ba9840e688369822a3fcfb2d9

Kulula futhi ukusetha kabusha okukhiphayo kwekhonsoli ukuze umsebenzisi angaboni ngokushesha lokho akufakile. Isibonelo, kuyacatshangwa ukuthi lapho ukopisha amazwibela ekhodi engenabungozi, ungacekela phansi izingxenye zakho ngokudlula.

27670b8ba9840e688369822a3fcfb2d9

Ibhodi lokunamathisela lingasetshenziswa (ngendlela ehlukile) ngisho nangaphandle kwe-JavaScript:

27670b8ba9840e688369822a3fcfb2d9

Uma umaka umbhalo owufunayo, isibonelo kuFirefox yakamuva (v. 45.0) akuwona umbhalo ogcina usebhodini lokunamathisela, kodwa umbhalo ongemuva kwawo.

Zombili izindlela zingazanywa bukhoma lapha. Lapha ukwahluka kwe-JS:

See the Pen Pastejacking #1 by David Vielhuber (@vielhuber) on CodePen.

Kanye nokuhluka kwe-CSS:

See the Pen Pastejacking #2 by David Vielhuber (@vielhuber) on CodePen.

Emuva