When GIFs serve JavaScript
iamajin.blogspot.com
When GIFs serve JavaScript
1–10 of 17 posts
Re: When GIFs serve JavaScript
#2Off-topic: Hilarious how broken Blogspot seems to be. Half the time I load this URL, I get a different post on the same blog ("Static DOM XSS Scanner") but still with the intended URL. Whatever this fancy JavaScript loading thing they are doing is utter bullshit.
Re: When GIFs serve JavaScript
#3Off-topic: Hilarious how broken Blogspot seems to be. Half the time I load this URL, I get a different post on the same blog ("Static DOM XSS Scanner") but still with the intended URL. Whatever this fancy JavaScript loading thing they are doing is utter bullshit.
The same thing happened to me. It's kind of ironic that to read an article about serving javascript in GIFs, I had to turn all of my js filters off.
Blogger is seriously horrible.
Re: When GIFs serve JavaScript
#4Off-topic: Hilarious how broken Blogspot seems to be. Half the time I load this URL, I get a different post on the same blog ("Static DOM XSS Scanner") but still with the intended URL. Whatever this fancy JavaScript loading thing they are doing is utter bullshit.
Thanks for pointing it out, I actually thought that was the article and didn't realise my mistake until I saw your comment.
Re: When GIFs serve JavaScript
#5Off-topic: Hilarious how broken Blogspot seems to be. Half the time I load this URL, I get a different post on the same blog ("Static DOM XSS Scanner") but still with the intended URL. Whatever this fancy JavaScript loading thing they are doing is utter bullshit.
The same thing happened to me. It's kind of ironic that to read an article about serving javascript in GIFs, I had to turn all of my js filters off. Blogger is seriously horrible.
> I had to turn all of my js filters off.
I could read the article by enabling JS only for 1st-party + www.blogblog.com + www.blogger.com.
Re: When GIFs serve JavaScript
#6Off-topic: Hilarious how broken Blogspot seems to be. Half the time I load this URL, I get a different post on the same blog ("Static DOM XSS Scanner") but still with the intended URL. Whatever this fancy JavaScript loading thing they are doing is utter bullshit.
Turning off javascript gives a blank page. Absolutely blank, not a single piece of content, not even - and this would still be terrible, just a tiny, tiny bit better than downright ridiculous - a message saying "you need javascript enabled to view this content". Say what you like about webapps requiring javascript (an argument for another day), there is no excuse for a blog requiring it.
Re: When GIFs serve JavaScript
#7Off-topic: Hilarious how broken Blogspot seems to be. Half the time I load this URL, I get a different post on the same blog ("Static DOM XSS Scanner") but still with the intended URL. Whatever this fancy JavaScript loading thing they are doing is utter bullshit.
I'm glad you mentioned this because I initially got the Static XSS Scanner and was about to flag the article as "full of lies"
Re: When GIFs serve JavaScript
#8Off-topic: Hilarious how broken Blogspot seems to be. Half the time I load this URL, I get a different post on the same blog ("Static DOM XSS Scanner") but still with the intended URL. Whatever this fancy JavaScript loading thing they are doing is utter bullshit.
So blogspot.com is being merged with Google+? I only rarely bother to disable my JavaScript/ad blockers to read things there.
Looking at the source, it's a big pile of minified/obfuscated javascript crap. I can't be bothered to decode it.
Re: When GIFs serve JavaScript
#9Off-topic: Hilarious how broken Blogspot seems to be. Half the time I load this URL, I get a different post on the same blog ("Static DOM XSS Scanner") but still with the intended URL. Whatever this fancy JavaScript loading thing they are doing is utter bullshit.
Aha, thanks for that, I was wondering why the post had nothing to do with GIFs.
Re: When GIFs serve JavaScript
#10Would this be blocked by the X-CONTENT-TYPE-OPTIONS header?
(source: http://ibuildings.nl/blog/2013/03/4-http-security-headers-yo... )