Hidden Link Detector

Theabout 11 years ago

https://greasyfork.org/en/scripts/11623-hidden-link-detector

As many of you know, hidden links can be a significant for threat one's security all throughout the Internet, not limited to just Epicmafia. To combat this threat, have made a greasemonkey script that will detect and alert you of any hidden links on the current page. This script works on every website, including sites that have real-time updates like Skype.

If you haven't already, install the tampermonkey extension for chrome or the greasemonkey extension for FireFox so you can install my script.

Instructions

Normal links will be unaffected, links that go to a destination other than what they appear to go to are highlighted in yellow, and any links that will run JavaScript when they're clicked are highlighted in red.

Hovering over the links will also show you the real destination, or in the case of a JavaScript link, the script that will be run when you click on it.

As always, notify me of any issues or exploits you may find in the script.

cubabout 11 years ago
because lucid should fix it instead

mods needed it for better reasons at the time i made it
Sanctifyabout 11 years ago
cub
i made this for mods quite a while back

also this isn't really a threat on any other website since they almost all properly sanitize input before parsing it. em is the first place i've seen that passes up the simple check for "does this link start with the word javascript" before making it a functional link

the real solution, which i've already given to lucid (complete with ctrl+f replace-ability) and he ignored, is just sanitizing links in his markdown file so you don't make a link that isn't really a link.

i would also recommend against running an interval constantly while links are static
why didn't u just make it for the general public lol so everyone has it
Sanctifyabout 11 years ago
plot twist: this is a hidden link
Miloo7about 11 years ago
like people like croned who actually care about this site should be mod, not...
Satanabout 11 years ago
mod foxie
cubabout 11 years agoedited
and far more so i recommend against loading the entirety of the jquery library in your script that barely needs it, big wasted request on every page

running the entire thing with eval(), not even once
cubabout 11 years ago
i made this for mods quite a while back

also this isn't really a threat on any other website since they almost all properly sanitize input before parsing it. em is the first place i've seen that passes up the simple check for "does this link start with the word javascript" before making it a functional link

the real solution, which i've already given to lucid (complete with ctrl+f replace-ability) and he ignored, is just sanitizing links in his markdown file so you don't make a link that isn't really a link.

i would also recommend against running an interval constantly while links are static
moonabout 11 years ago
mod croned
Theabout 11 years ago
I have some safe test links on my profile, so you can see how it functions there.
ThomasDuBoisabout 11 years ago
bless u
MeetTerryabout 11 years ago
excellent job.
Satanabout 11 years ago
Jaleb
Nomination for Croned to be a site staff member!
no.
Jalebabout 11 years ago
Nomination for Croned to be a site staff member!
26
Theabout 11 years ago
Also, protip, hovering over any link (even without this script) will show you its true destination in the bottom left corner of your browser window.
2