Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Full Disclosure: Re: JavaScript inLine Debugger - The fastest web sites debugger (technique, not a tool)

Re: JavaScript inLine Debugger - The fastest web sites debugger (technique, not a tool)

From: Ben Bucksch <news_at_bucksch.org>
Date: Sat, 03 Feb 2007 12:51:33 +0100

SirDarckCat wrote:
> JaSiLDBG
> JavaScript inLine Debugger

Are you selling us the "javascript:" URL as "JaSiLDBG JavaScript inLine
Debugger"? From all I can tell from your doc, you simply renamed
"javascript:" to "JaSiLDBG".

Would have been more appropriate, and more useful, if you would have
called your doc "How to use the javascript: URL
Dynamically inspect and modify webpages".

The doc does seem to be a useful as introduction.

It contains an error right on the second page, though (I didn't read
much further): "the difference between properties and attributes is that
you can’t change attributes". That's not correct. Properties are (in C++
language) "member variables" of JS objects, while attributes are
conceptually more or less the same, just on DOM/XML/HTML nodes. Most of
them are not represented as JS properties due to potential name
collisions, but you can get them via the getAttribute() function, and
you can set/change them via setAttribute(). You mention it yourself on
page 14. The whole DHTML / AJAX movement bases on that.

See also
<http://www.w3.org/TR/2000/REC-DOM-Level-2-Core-20001113/idl-definitions.html>

A very interesting and very stretching use of javascript: URLs can be
found at <http://www.squarefree.com/bookmarklets/>. Highly recommended.

Ben

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Received on Feb 03 2007

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]