JavaScript Troubles [JavaScript]

Prev: javascript: window.open ie6 vs ie7
Next: submit form with javascript

From: Cerebral Believer on 7 Oct 2006 10:53

Hi folks,

I am having some issues using a program that protects my web pages (to a
degree) using JavaScript (to print screen/disable clipboard, caching text
selection etc). Below is the code for the page after it has been encrypted
on the local machine:

[CODE]

<html>

<head><meta http-equiv="Content-Type" content="text/html;
charset=windows-1252"><SCRIPT LANGUAGE="JavaScript"></SCRIPT><SCRIPT
LANGUAGE="JavaScript"></SCRIPT><META
HTTP-EQUIV="Pragma" CONTENT="No-Cache"><META HTTP-EQUIV="Cache-Control"
CONTENT="No-Cache,Must-Revalidate,No-Store"><META HTTP-EQUIV="Expires"
CONTENT="0"><META HTTP-EQUIV="ImageToolbar" CONTENT="No"><META
NAME="MSSmartTagsPreventParsing" CONTENT="True">
<meta http-equiv="Content-Language" content="en-gb">

<title>New Page 1</title>
</head>

<body><NOSCRIPT>To display this page you need a browser with JavaScript
support. Please update your browser, or, visit your browser vendor or
java.com to obtain a JavaScript plug-in.</NOSCRIPT><SCRIPT
LANGUAGE="JavaScript"></SCRIPT>

<p><img border="0" src="../../images/FBD%20Banner_cmp.jpg" width="768"
height="192"></p>
<p> </p>
<p>Can this text be selected too?</p>

</body>

</html>[/CODE]

Here is the code that I veiw when I access the page after it has been
uploaded to the server with FrontPage:

[CODE]
<html>

<head><meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<script language="JavaScript">

</script>



<script language="JavaScript">
<!--
var SymRealOnLoad;
var SymRealOnUnload;

function SymOnUnload()
{
window.open = SymWinOpen;
if(SymRealOnUnload != null)
SymRealOnUnload();
}

function SymOnLoad()
{
if(SymRealOnLoad != null)
SymRea

From: VK on 7 Oct 2006 16:34

Cerebral Believer wrote:
> function SymError()
> {
> return true;
> }
>
> window.onerror = SymError;
>
> var SymRealWinOpen = window.open;
>
> function SymWinOpen(url, name, attributes)
> {
> return (new Object());
> }
>
> window.open = SymWinOpen;
<snip>
> As you can see, the begginings and endings of the server side code are
> different to the code that was uploaded to the server from the local drive.
> Anyone any ideas on why this should be the case, and what the extra code
> should do?

The code changes not during the upload, but when accessing the page in
your browser. Disable your McAffee virus protection and it will come
back to normal. McAffee - and some other antivirus programs - shadows
several native window methods by loopholes (bogus functions), so in
case if you have to take extra boring steps to restore the original
references. (In my strong opinion some ears should be cut off for that
idea - and what a hell say window error collector has to do with a
virus protection?)

> OK, I can view my pages fine in Firefox and Netscape, also IE 6.0 (and have
> had reports to the same effect), but a user using IE 7.1 has reported that
> when he views my pages he gets a security warning, saying "Do you want to
> allow this website to access your clipboard".

That is nothing to do with with the "antivirus" vandalism, you must be
using some methods in your original code which are restricted for usage
in IE7.

From: Richard Cornford on 7 Oct 2006 18:55

Cerebral Believer wrote:
> I am having some issues using a program that protects my
> web pages (to a degree) using JavaScript (to print
> screen/disable clipboard, caching text selection etc).
<snip>

Any attempt to cripple the facilities of the user's browser represent an
abuse, and all facilities that are employed abusively are likely to be
withdrawn over time. When these facilities are withdrawn or restricted
much that could have been usefully employed will be lost with them (and
lost to everyone). It is best to learn from history and not write or use
abusive scripts.

> ... - the pages on the rest of the site employ a similar
> code, and also trigger security alerts for some reason in
> IE7.1, but they were not designed to access clipboards, but
> to stop people from doing screen captures while on my
> site.
<snip>

Browsers provide no mechanism that will prevent the use of the clipboard
by the user. the only technique ever proposed that could make the user's
attempts to use their clipboard non-viable is for the script to be
continuously writing to the clipboard (thus overwriting anything that had
been added by the user. Obviously constantly writing to the clipboard is
accessing the clipboard and will trigger IE security alerts if their
security settings for the significant zone have clipboard access set to
"prompt". Clearly the default setting for scripted access to the
clipboard have been changed between IE 6 and 7, possibly prompted by
exactly this sort of script as its side effect is to destroy data that
belongs to the user without consent or warning.

Richard.

From: Hywel Jenkins on 8 Oct 2006 07:43

In article <vbPVg.5985$gO3.4213(a)newsfe7-win.ntli.net>,
nospamthanks(a)hadenoughalready.com says...
> Hi folks,
>
> I am having some issues using a program that protects my web pages (to a
> degree) using JavaScript (to print screen/disable clipboard, caching text
> selection etc). Below is the code for the page after it has been encrypted
> on the local machine:

Oh dear. You've wasted your time.

--
Hywel
http://kibo.org.uk/

From: kudzai on 8 Oct 2006 08:55

I visited this page
http://www.futurebydesign-music.com/htmlprot/test.html, and sure enough
I couldn't highlight the text.

Then I disabled Javascript without reloading the page. Now I could
highlight and copy the text. I was using Firefox 1.5.0.7.

kudzai
http://www.myscwebdesign.com

| Next | Last
Pages: 1 2
Prev: javascript: window.open ie6 vs ie7
Next: submit form with javascript