If someone can inject JS into your site, you have bigger problems than wrong links. /cc @aral @_funkyboy
-
-
-
@edwinmdev@aral it's not in "your site", it's in *every* browser (excluding opera).
End of conversation
New conversation -
-
-
Somebody discovers you can change page behavior with JS. And proposes a fix that won't work :-/ http://bilaw.al/2013/03/17/hacking-the-a-tag-in-100-characters.html … /cc
@aral@_funkyboyThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@aral@_funkyboy Zeroday, wow. This could of been taken advantage of for more than a decade...Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@aral@_funkyboy .. Preventing href change on click won't fix that..? -
@sneakymichael@aral if code it injected after that I don't think so ...
End of conversation
New conversation -
-
-
@aral@_funkyboy .onclick = function (e) { e.preventDefault(); document.location.href = 'http://bla.com '; }Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.