[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: dietzzoo blocking popups for us? :)



It would be interesting to compare dietzzoo to other Comcast Tor nodes.
Although there are no other nodes presently on NJ-SOUTH-2, it might be
possible to get a better sense of whether Comcast is responsible.

On Tue, Jan 02, 2007 at 09:44:09PM -0600, Mike Perry wrote:
> It appears the tor node dietzzoo
> ($7E116EDADF03F4D82215C0DBBA2640E43A78716E) is inserting some
> anti-popup javascript code into pages fetched through it.
> 
> Noticed this on a fetch of 
> http://www.dfait-maeci.gc.ca/common/in-en.asp
> 
> and
> 
> http://www.cmiss.org/ReleaseCenter/mozcmgui/releases/0.4.1.2/mozCmgui-0.4.1.2-win32.xpi
> 
> The diff is attached. According to google this is pretty standard
> popup blocking code used by some hosting providers... 
> 
> 
> -- 
> Mike Perry
> Mad Computer Scientist
> fscked.org evil labs

> --- in-en.asp	2007-01-02 21:13:57.000000000 -0600
> +++ http:\\www.dfait-maeci.gc.ca\common\in-en.asp-$7E116EDADF03F4D82215C0DBBA2640E43A78716E-0	2006-12-30 04:44:13.000000000 -0600
> @@ -74,6 +74,29 @@
>  </table>
>  <a name="skipnav"></a>
>  
> +
> +<script language="JavaScript">
> +<!--
> +
> +function SymError()
> +{
> +  return true;
> +}
> +
> +window.onerror = SymError;
> +
> +var SymRealWinOpen = window.open;
> +
> +function SymWinOpen(url, name, attributes)
> +{
> +  return (new Object());
> +}
> +
> +window.open = SymWinOpen;
> +
> +//-->
> +</script>
> +
>  <script language="JavaScript" type="text/javascript">
>  	function initialize()
>  	{
> @@ -477,3 +500,31 @@
>          </table>
>  </body>
>  </html>
> +
> +<script language="JavaScript">
> +<!--
> +var SymRealOnLoad;
> +var SymRealOnUnload;
> +
> +function SymOnUnload()
> +{
> +  window.open = SymWinOpen;
> +  if(SymRealOnUnload != null)
> +     SymRealOnUnload();
> +}
> +
> +function SymOnLoad()
> +{
> +  if(SymRealOnLoad != null)
> +     SymRealOnLoad();
> +  window.open = SymRealWinOpen;
> +  SymRealOnUnload = window.onunload;
> +  window.onunload = SymOnUnload;
> +}
> +
> +SymRealOnLoad = window.onload;
> +window.onload = SymOnLoad;
> +
> +//-->
> +</script>
> +

Attachment: signature.asc
Description: Digital signature