RFE (with patch): ASP __doPostBack detection

Bug reports and enhancement requests
Post Reply
Lekensteyn
Junior Member
Posts: 31
Joined: Thu May 19, 2011 12:01 pm

RFE (with patch): ASP __doPostBack detection

Post by Lekensteyn »

There are some ancient broken shitty ASP sites that put their links behind an ugly javascript:__doPostBack URL. What do you think of this patch? The "aspnetForm" name seems to be a default, but I have seen other names ("isisform", "Form1"). All use the "theForm" global variable, but I don't know how to get that string securely in a Firefox extension.

Patch at https://github.com/Lekensteyn/noscript/ ... a1268e198c, I tried to post it here, but your antispam filter hates me.
Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: RFE (with patch): ASP __doPostBack detection

Post by Thrawn »

:D Not only has the spam filter prevented you from posting the contents, but the link to GitHub was truncated (and broken) when you previewed your post before submitting it.

Please try it again inside [ url ] tags, or else PM the contents to a moderator.

And thanks for the code.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0
barbaz
Senior Member
Posts: 11109
Joined: Sat Aug 03, 2013 5:45 pm

Re: RFE (with patch): ASP __doPostBack detection

Post by barbaz »

Just happened upon this thread

The RFE sounds like a really good idea, but I'm not sure that the proposed patch (https://github.com/Lekensteyn/noscript/ ... a1268e198c?) is the best approach... I'm not seeing why it can't be done instead as a surrogate script?
*Always* check the changelogs BEFORE updating that important software!
-
Post Reply