full-disclosure - Re: JavaScript inLine Debugger - The fastest web sites debugger (technique, not a tool)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 03 Feb 2007 12:51:33 +0100
From: Ben Bucksch <news@...ksch.org>
To: SirDarckCat <sirdarckcat@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: JavaScript inLine Debugger - The fastest web
 sites debugger (technique, not a tool)

SirDarckCat wrote:
> JaSiLDBG
> JavaScript inLine Debugger

Are you selling us the "javascript:" URL as "JaSiLDBG JavaScript inLine 
Debugger"? From all I can tell from your doc, you simply renamed 
"javascript:" to "JaSiLDBG".

Would have been more appropriate, and more useful, if you would have 
called your doc "How to use the javascript: URL
Dynamically inspect and modify webpages".

The doc does seem to be a useful as introduction.

It contains an error right on the second page, though (I didn't read 
much further): "the difference between properties and attributes is that 
you can’t change attributes". That's not correct. Properties are (in C++ 
language) "member variables" of JS objects, while attributes are 
conceptually more or less the same, just on DOM/XML/HTML nodes. Most of 
them are not represented as JS properties due to potential name 
collisions, but you can get them via the getAttribute() function, and 
you can set/change them via setAttribute(). You mention it yourself on 
page 14. The whole DHTML / AJAX movement bases on that.

See also
<http://www.w3.org/TR/2000/REC-DOM-Level-2-Core-20001113/idl-definitions.html>

A very interesting and very stretching use of javascript: URLs can be 
found at <http://www.squarefree.com/bookmarklets/>. Highly recommended.

Ben

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/