Scripts hidden in SVG

Ask for help about NoScript, no registration needed to post
noscript-fan

Scripts hidden in SVG

Post by noscript-fan »

Take a look at http://www.croczilla.com/svg/samples/in ... vaders.svg

It appears to embed javascript inside svg, and noscript doesn't block it.

Fan
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Scripts hidden in SVG

Post by therube »

view-source:http://www.croczilla.com/svg/samples/in ... vaders.svg

For me, the game does not play unless I allow croczilla.com.

Source page, http://www.croczilla.com/svg/samples/.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20090403 SeaMonkey/1.1.16
dhouwn
Bug Buster
Posts: 968
Joined: Thu Mar 19, 2009 12:51 pm

Re: Scripts hidden in SVG

Post by dhouwn »

therube wrote:For me, the game does not play unless I allow croczilla.com.
Same here.
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1b4) Gecko/20090503 Firefox/3.5b4
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3369
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: Scripts hidden in SVG

Post by GµårÐïåñ »

Yeah, the game doesn't do squat unless I allow it, so NS is doing its job. So not sure what's going on but maybe you have it allowed somewhere and not realizing it?
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10
Post Reply