Tag Info

New answers tagged

3

No it is not safe. You are correct that the JSONP service could deliver arbitrary JavaScript, which is then executed as part of your site. Because JSONP is essentially a hack to get around the same origin policy, it is not possible for a JavaScript framework to perform sanitisation. These days, CORS is the preferred way to call external sites. An ...


1

Any working web scraper actually has to decode HTML entities, because characters like “<” or “>” (which can also appear in e-mail addresses) are always encoded when they occur as data. So decoding of entities isn't even a a special “attack feature”. It's a natural functionality. Your only hope would be that the authors of the spambot somehow don't ...


1

Protecting email addresses with JavaScript seems an effective way. I have email addresses out on a few webpages quite a long time, and never received spam mails for them. At least for email-adresses which you have to share on a homepage, this gives a little peace to their owners. The email addresses are written backwards and a JavaScript is reversing them. ...


2

Keeping an email "safe" is nigh impossible. In particular, there are widely deployed malware that inspect the address book of infected systems, in order to: gather the emails themselves for spamming purposes; send themselves to these people so as to spread the infection. To see your email becoming part of spamming lists, it suffices that one of the ...


4

No, that's not going to fool spambots. I've seen a couple of spambots that were parsing the entire DOM using tools like html5lib or comparables. Of course, many spammers just "guess" at email addresses: the cost of sending emails when you have a botnet is basically 0, so making combinations of username & domains to guess works out well. Slightly ...



Top 50 recent answers are included