Re: [Bug-gnuzilla] A need of a paradigm shift for solving the JavaScript Trap

[Julian]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/14/2014 09:14 PM, Nik Nyby wrote:
> I've also thought about this, and my conclusion was that it's
> simpler to turn off javascript and click "view source" to see any
> images, files, or text the JavaScript contains.

Simpler in the short-term, but it seems it must be possible to do this
in software, and it would make the job worlds easier if it is. For
example, scripts can be trivially searched for HTTP links, and the CSS
style can be analyzed to figure out if stuff is hidden (e.g. by the
CSS display attribute). With things like that, you would already have
a lot of bases covered, and it could be improved from there to detect
less trivial hiding methods, gradually.

- -- 
Julian Marchant
https://onpon4.github.io

Protect your privacy with GnuPG:
https://emailselfdefense.fsf.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUZsGhAAoJELP1a+89AVMCOqMIALjmpEEF1cyhSCQEo7bTcLPA
1ItQfTJIkYOs32OxmiGLjTzAgi4/GCPW3Y2sT0XwpG4aRu+dUmMkplgqp7yXqJHR
3hiQuDa3+wEYDLUS3I6QdOXw+7SAJEuOYG3u5Rn+PsHsvJ1SCi6R89B20rG4LkrX
UlLZT2tdbuygVvrHGyxLy3xenYxVsbQSAK32X+FuTsBN2D9HnD8PS0LLr5AM4yEN
U+hwBqnzaLj451JDYB64QshC4uac5cAqiU4r7RBKyAM5kMYJPaX+ShCh+4Rl1c/V
CA1HqBw9gjB7ufaPOn1koZqwm+GmR9yijRexi7OU4DQhXaMLSNwbUIJRGtcWr7o=
=LttH
-----END PGP SIGNATURE-----