Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Thursday, October 11, 2007

Be careful while installing greasemonkey scripts

I would recommend you to view the source code before you install any greasemonkey scripts in your browser.
If you are not familiar with javascript, look if the script has the following words (do an Ctrl+F) :
1) "GM_xmlhttpRequest" (this can potentially send your data to third party servers!)
2) "document.cookie" or "cookie" (do not allow third party scripts to access/steal your cookie)
3) "script.src" (script src hacks can do much harm)

Though these are not exhaustive, they cover the majority of potential vulnerabilities. If in doubt, better not install the script.