Comments on: BugMeNot Auto-Bookmarklet.

By: Matthew Schinckel

Matthew Schinckel — Fri, 12 May 2006 01:34:02 +0000

I’m not sure what you are suggesting. This code will not work, as it still is trying to access the information from another domain.

Properly developed/implemented JavaScript interpreters will not allow Cross-Site Scripting (XSS).

By: ' OR ' '

' OR ' ' — Thu, 11 May 2006 07:33:53 +0000

bmpopup.close();

bm_user = acc.split(”")[0];
bm_pass = acc.split(”")[1];
un.value = bm_user;
pw.value = bm_user;

By: Matthew Schinckel

Matthew Schinckel — Wed, 12 Oct 2005 06:26:10 +0000

No good. Frames and iFrames also disallow the control by scripts running from pages outside of their domain.

Even loading a new page, and then trying to access the variables will not work.

I guess they’ve thought of everything…

The only way I could get it to work is if I was able to have a script on a server run, that used curl or something to get the data. Even then I may not be able to get the data back into the original page. Bummer.