>>They don't call it Malware for nothing

Ok, but if a malware does "mal" to a moron client side, in a pinch, this is not 
our problem, but if it can get pass words so easily, it can also do mal to any 
server any time.
I just got one tonite that allows itself to define cookies under MY domain!
If it can store cookies, it can also read cookies, including session cookies!
With the session Id, it does not even need the password.

I'd like to detect all pieces of javascript code defined in a document and 
check if they are mine.
I was thinking of document.getElementsByTagName, but I'm not even sure all 
parasit code will actually have a <SCRIPT tag.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:359229
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to