On Nov 13, 12:44 pm, FDIMM <[email protected]> wrote:
> Hello,
>  I am using "firebug" and i can tell only good things about it :)
> It is very powerfull, even too powerfull if you want to prevent users
> from hacking...
>
> The reason why I am writing is firebug dedection... Why there is no
> way to detect it ? You can only detect it if console is enabled, and
> you can bypass this easily!

I would describe this feature differently: The Firebug Console disable
feature is designed to protect user privacy. As a user of Firebug you
should know that the Console adds a 'console' property to the Web page
window and this property can be tested by Web page Javascript. If you
do not want a Web page to detect your use of Firebug, disable the
Firebug Console.

>
> So i suggest to consider this, and implement a way to detect and
> prevent users from using it. It's meant for debuging not breaking
> security of the site. Isn't?

Firebug is designed for debugging and has no features designed to
defeat site security. All of the operations performed by Firebug are
either local to a user's machine or standard Web API operations.


>
> Just set window.firebug to true and that would help a lot!
>
> FDIMM

--

You received this message because you are subscribed to the Google Groups 
"Firebug" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/firebug?hl=.


Reply via email to