Skip to main content
204 questions
Newest Active Bountied Unanswered
Filter by
Sorted by
Tagged with
1 vote
1 answer
286 views

Suppose I am writing a bookmarklet script to modify a webpage. Most websites (using webpack, etc) follow a structure something like this: <html> <script type="text/javascript"&...
Kaia's user avatar
  • 909
1 vote
1 answer
327 views

I've got a simple hobby website - www.stuartconner.me.uk - where I've largely hand-coded the HTML (as a learning exercise) and uploaded to a cheap web hosting platform over FTP. Pages are occasionally ...
Stuart C's user avatar
  • 11
3 votes
3 answers
5k views

im having a problem with getting the parameters which 2captcha api needs to solve the captcha . The type of Captcha Im struggeling with, is Cloudflare Turnstile. There are two hidden parameters you ...
parsa's user avatar
  • 31
2 votes
1 answer
261 views

I'd like to REPRODUCE a scenario where a 3rd party testing team injected a <script> tag into an HTML template on our front end. Then I want to add code to prevent this (i.e. front end angular ...
bob.mazzo's user avatar
  • 5,789
0 votes
0 answers
927 views

I am solving the ctf challenge. Is it possible to bypass this RE and execute JS injection? <script> s=decodeURIComponent(location.search.substr(1)); if(/^[".=acdeimnotu]*$/.test(s)) eval(s)...
Kubbi's user avatar
  • 1
-1 votes
1 answer
1k views

Say I have the following code: in my content-script.js: const script = document.createElement('script'); script.setAttribute("type", "application/javascript"); script.src = chrome....
Abraham P's user avatar
  • 15.6k
0 votes
0 answers
49 views

I have a html file and 2 JavaScript files: mainscript.js and script1.js. I inject the script1.js inside the mainscript.js. However, what happens is that by calling script1.js, the htmltags created by ...
Pouneh Bahrami's user avatar
  • 13
0 votes
0 answers
43 views

I use an Iframe with an external API, which I don't control. My goal is to add Javascript code in my Website, to change the style of a few elements in the Iframe. First I considered using document....
hans werner's user avatar
  • 1
0 votes
1 answer
2k views

I need some help with Android's WebView. I am trying to create an app which loads a webpage, I cannot change. The webpage does load a number of javascript files and I am trying to overwrite the ...
Bilbo's user avatar
  • 75
2 votes
0 answers
146 views

I'm working on a project that allows users to pay for items through virtual generated cards. It is built on React Native and uses WebView to allow in-app browsing of online stores. Since there is no ...
Abenezer Bayeh's user avatar
  • 95
-1 votes
1 answer
305 views

I am using Requestly to Inject script but couldn't find a way to inject the script only in a particular Iframe. Is there any way to insert custom JS using Requestly in a particular iFrame in a webpage?...
J.Nishanth Babu's user avatar
  • 3
9 votes
3 answers
3k views

I'm making an extension that injects a user provided script into the current website. I've gotten that part done (with the help of wOxxOm). Only problem is that on some websites, it doesn't work. It ...
Mood's user avatar
  • 172
1 vote
1 answer
2k views

I want to go into full-screen mode (F11) on certain pages. For this, I am using Requestly chrome extension to insert a script on a webpage. Here is the script document.body.requestFullscreen(); ...
saurabh patel's user avatar
  • 23
1 vote
1 answer
2k views

whenever I end up on a certain page, which has a certain URL ("A"), i want my browser (Chromium) to wait there 10 seconds (without doing nothing else) and then automatically redirect me to ...
an anon's user avatar
  • 9
0 votes
2 answers
385 views

I have a sample html page here which displays a video, I am using javascript injection to play/pause the video. But now I want to control the volume as well. How do I create a function which decreases/...
Programmer's user avatar
  • 39
5 votes
1 answer
2k views

I can see in Sentry report that, Along with my vendors~main-6319dfea084cb55e85bf.js,main-6319dfea084cb55e85bf.js and other resource.scripts and resource.css files i can see https://localhost:49506/...
Ela's user avatar
  • 231
1 vote
1 answer
181 views

My goal is to inject instrumentation code into certain scripts of certain websites to then lately collect the data using chrome extension and upload it to a centralized DB. The last time I tried this ...
user1617735's user avatar
  • 443
2 votes
0 answers
371 views

I'm writing an app the contains a WebView in which I display pages from different websites. Some of these pages contain IFrames. My app injects javascript into the displayed WebView and my problem is ...
FunkSoulBrother's user avatar
  • 2,177
0 votes
0 answers
852 views

Warning: possibly involves a set of programming bad practices to bypass security features. We're developing a bundle of scripts that extract public information from some website. I use ViolentMonkey ...
gyohza's user avatar
  • 856
0 votes
3 answers
556 views

I have this code: <!DOCTYPE html> <html> <head> <title>Sign up page</title> <meta charset="UTF-8"/> </head> <body> ...
Lakshya Raj's user avatar
  • 1,815
1 vote
1 answer
757 views

I have public editor where users can share notes using TinyMCE but I'd like to prevent them of inserting JavaScript or SQL (any type of scripts) in this editor. So my question is: how? Here is my ...
mafortis's user avatar
  • 7,188
0 votes
0 answers
44 views

I have a partial, which could be re-used many times in the same view. It hosts a chartjs element. The Partial loads, makes an ajax call to get its data. The various keys of the Chart are populated ...
Neal Rogers's user avatar
  • 500
0 votes
1 answer
1k views

these are the cards and I have written javascript to select the button and turn it into an active class but when I select the button it is not select and not turn into an active button where is the ...
Dhruv's user avatar
  • 13
1 vote
1 answer
1k views

If I have a pdf file with malicious javascript embedded in it (visible or obfuscated) - will converting that file to pdf/a format (with a commercial tool) deactivate the javascript - making the file ...
K13's user avatar
  • 314
0 votes
1 answer
176 views

There's a website I need to check at constant intervals but it has certain JS functions programmed into it that are more aesthetic than anything else, and the result is that it eats up my CPU for no ...
QuestionerNo7's user avatar
  • 630
0 votes
0 answers
182 views

This is my first question here in stackoverflow, so pardon me if I am missing something! I'm working on a project related to VPN security. They main goal of the project is to detect if a VPN client is ...
ismaeldlg's user avatar
  • 1
3 votes
1 answer
319 views

I'm writing a Javascript code that needs to watch for new 'script' elements, and to block a few known sources. To catch those, I've tried using MutationObserver and __ defineSetter __ , both can ...
Liron Avital's user avatar
  • 31
-1 votes
1 answer
416 views

Some extensions are modifying the HTML and inserting their own scripts in the website. Is there a way to disallow extensions to run scripts on my website? I tried with CSP, but it doesn't seem to work....
rramakrishnaa's user avatar
  • 827
1 vote
0 answers
372 views

I am trying to find the best place for re-injecting Javascript in the following two contexts: On-demand injection (only when user presses a button): Right now, I have the Javascript injection in my ...
matty902's user avatar
  • 11
0 votes
1 answer
147 views

I am developing a web-scraper on an Android App and I have developed automated surfing with js insertion. I do tasks like the following: document.getElementById("user").innerText="...
Alvaca's user avatar
  • 1
5 votes
1 answer
1k views

I am trying to isolate user JavaScript code for security. I can do this via Iframe security and message passing. Is there a JavaScript runtime that can be loaded via webassembly to which i can pass ...
maxfridbe's user avatar
  • 6,000
0 votes
1 answer
676 views

I need to implement a logic where the user sends some content (it can be just a string but also can be part of HTML markup), we store that info to a database, and at some period of time, we replace ...
Bogdan Dubyk's user avatar
  • 5,644
0 votes
1 answer
281 views

I'm experiencing security issues with multiple wordpress sites I host. All the sites have different themes, and are on different servers and isolated within different users. They have been running for ...
Felix Godbout's user avatar
  • 7
1 vote
0 answers
231 views

I'm trying to calculate WKWebView content height according to font size. There is a lot of topic about it but none of it worked for me. I created demo app for test. In my test app I'm changing size of ...
Özgen Çağan Kiraz's user avatar
  • 23
-1 votes
1 answer
176 views

I'm creating a tool that generates reports, I'd like to "html-ify" them The reports contain many tables, and this JAVA SCRIPT package would be great https://kryogenix.org/code/browser/sorttable/ It ...
user3696153's user avatar
  • 798
0 votes
1 answer
583 views

Thank you in advance for your assistance. Basically I'm using Rambox Pro (basic browser with injecting JS & CSS support only) into webpages as my workstation & I'm using Notion & want this ...
user13050686's user avatar
  • 5
4 votes
1 answer
3k views

I know this type of question might have asked many times but I am sure that this one is different than all of them. I have a Input TextArea control on server side, I am trying to remove all inline ...
Omi's user avatar
  • 447
1 vote
2 answers
2k views

I've got a python script that wraps a bash command line tool, that gets it's variables from external source (environment variables). is there any way to perform some soft of escaping to prevent ...
Zohar81's user avatar
  • 5,214
1 vote
1 answer
575 views

I'm redoing some stuff on a website. I create my own forms and there's been a hidden field injected into my system somehow, after my Submit button. I have (updated) found that it is injected by ...
Rich_F's user avatar
  • 2,136
0 votes
1 answer
583 views

We use KioWare, and want to trigger a local application (which we can do no problem by keybind). We only want to trigger the keybind when a specific page element changes from "blahblah-hidden" to "...
Nathan Jorstad's user avatar
  • 1
3 votes
0 answers
789 views

In order to make my Chrome Browser undetectable when using Selenium I'm trying to modify the get function on the webdriver to answer always with false. To do so, I've created a Chrome Extension that ...
RazorMx's user avatar
  • 427
4 votes
1 answer
2k views

We are trying to load a PDF in an iframe using ExtJs. The PDF is embedded with JavaScript. When it is loaded in the browser, the alert is being displayed and it is considered as JS injection in ...
Krishna's user avatar
  • 621
8 votes
1 answer
7k views

I have loaded a webpage using WebView component and added a JavascriptInterface. Please check the code below, val webview = WebView(this) setContentView(webview) webview.settings.javaScriptEnabled = ...
Perseus's user avatar
  • 1,588
0 votes
0 answers
2k views

I want code which can validate true or false, based on a condition. If my textbox value contains any js injection, example: var str = "alert('text')" how do I know if the str is a normal text or it ...
jyotisman's user avatar
  • 83
0 votes
1 answer
1k views

I've found lots of information about JavaScript injections, but didn't find any specific regarding password field. For my test GMail account I was able to set the next password <Script>alert(...
Alex Kulinkovich's user avatar
  • 4,808
0 votes
2 answers
76 views

Im trying to change the title of youtube page (so that the tab at the top of the browser changes to "test" instead of "youtube"). It changes for a few seconds, changing from "youtube" to "test", and ...
Orbek's user avatar
  • 11
0 votes
1 answer
124 views

I have a prestashop installation live which has been somehow injected with malitious code, here is my prestashop: https://debou.it in chrome console I see this external javascript is loaded many ...
silk's user avatar
  • 128
0 votes
0 answers
28 views

I want to know if the way I'm escaping quotes is the best or if it can be enhanced. Visitors can submit text which is stored in database and then displayed in another page. Simple enough. I use PDO ...
Gawet's user avatar
  • 315
0 votes
1 answer
3k views

Is there anyway to bypass input sanitization and do HTML injection. It is an exercise from bWAPP.When I am trying to do HTMLi , input validation is checked and special characters are sanitized.The ...
phaneendra yandrapragada's user avatar
  • 25
0 votes
1 answer
2k views

Java JavascriptExecutor js = (JavascriptExecutor) driver; Boolean ready = (Boolean)js.executeScript("the below JavaScript"); JavaScript var ready = false; window.onload = function() { ready = ...
Sintrias's user avatar
  • 606

1
2 3 4 5