http://www.perlmonks.org?node_id=159187


in reply to Re: Re: Believe me - trust no-one ;-)
in thread Believe me - trust no-one ;-)

Please explain to me what JavaScript is still executed from Petruchios page. The onLoad() event is not fired in my browser. What am I missing?

Update: I'm using Mozilla 0.9.9 under Win32 here. (I'll try with Mozilla 0.9.8 under Linux at home later.)

My settings are:



Update 2:
I found it! I do not allow loading of images from other sites than the host of the page, which is why Petruchios image doesn't load. And thereby why the onLoad() event doesn't get fired off.

Thereby I understand how JavaScript is still a threat on Petruchios home node. (And potentially others too.)


Everything went worng, just as foreseen.

Replies are listed 'Best First'.
Re: (x4) Believe me - trust no-one ;-)
by mrbbking (Hermit) on Apr 15, 2002 at 14:11 UTC
    If I remove perlmonks from my list of 'restricted sites' in MSIE (it's in there only to disable JavaScript), I get a dialog box that shows the value of my perlmonks cookie, and warns me that it could just as easily have been stored somewhere, and my account stolen.

    Looking at the source, his picture of a jelly donut has an onload handler that pops up the alert box.

    Is your browser set to disable JavaScript at some level? I wonder if it's a browser-specific issue. I'll check a few others and post an update to my original node above with findings.