Blog ≫ 2003 ≫ Javascript snooping

Someone's been playing at posting javascript on my board, I thought it was all covered, it's not so I have some javascript snooping links to follow up, see what can be done... Should have stopped saving the password as a plain text cookie a long time ago!

<img onload='document.alert("hey");' alt=js>
<img onload='function test(){alert("hey");} test();' alt=js>
<img onload='function yo(){alert("title: " + document.title + ", cookie: " + document.cookie);} yo();' alt=js>
<img onload='function yo(){alert("hey");} yo();' alt=js>

None of those images do anything here, but maybe they do in other browsers...

js: Programming language of the web, mostly how I make my living.

💬 looks like that works in IE!

⬅️ :: ➡️
Mon Sep 01 2003

Paul Clarke's weblog - I live in Hythe. Married to Clare + dad to 2, I am a full-stack web developr, and I do javascript / nodejs, some ruby, python, php etc. I like pubbing, parkrun, eating, home-automation + other diy jiggery-pokery, history, genealogy, Television, squirrels, pirates, lego, and time travel.