Firefox and IE's "View source" can be spoofed to show anything

Post by Kudos » Thu, Sep 08, 2011, 4:12 PM UTC

Post by code_duck » Thu, Sep 08, 2011, 4:41 PM UTC

Post by xorglorb » Thu, Sep 08, 2011, 5:16 PM UTC

5hoom wrote: post #5

code_duck wrote: post #4

Thankfully, curl can't be tricked in such a manner. I'd have a more substantial comment, I hope, if the site was loading.

Yep. Sounds interesting but seems like it's meta-comments only at this stage. If anyone happens to load this elusive "View Source Spoof" page, please leave a nice detailed description for the rest of us. Our minds can draw the pictures :)

Post by dave1010uk » Thu, Sep 08, 2011, 5:50 PM UTC

xorglorb wrote: post #7

Since the site seems to be down, you can read the article (no images unfortunately) in Google's Cache[1]. [1]: https://webcache.googleusercontent.com/search?q=cache:http:/...

Post by dave1010uk » Thu, Sep 08, 2011, 6:00 PM UTC

jannes wrote: post #9

Hmm, I can't reproduce what he claims by only looking at the cached version without images and source code. I especially don't understand this part: When you use document.write outside of a script tag embedded inline in the page [...] What is "outside of a script tag embedded inline in the page" supposed to mean?

    setTimeout(function() {
      document.write('foo');
      document.close();
    }, 1);