OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] JavaScript inLine Debugger - The fastest web sites debugger (technique, not a tool)

From: Ben Bucksch (newsbucksch.org)
Date: Sat Feb 03 2007 - 05:51:33 CST


SirDarckCat wrote:
> JaSiLDBG
> JavaScript inLine Debugger

Are you selling us the "javascript:" URL as "JaSiLDBG JavaScript inLine
Debugger"? From all I can tell from your doc, you simply renamed
"javascript:" to "JaSiLDBG".

Would have been more appropriate, and more useful, if you would have
called your doc "How to use the javascript: URL
Dynamically inspect and modify webpages".

The doc does seem to be a useful as introduction.

It contains an error right on the second page, though (I didn't read
much further): "the difference between properties and attributes is that
you can’t change attributes". That's not correct. Properties are (in C++
language) "member variables" of JS objects, while attributes are
conceptually more or less the same, just on DOM/XML/HTML nodes. Most of
them are not represented as JS properties due to potential name
collisions, but you can get them via the getAttribute() function, and
you can set/change them via setAttribute(). You mention it yourself on
page 14. The whole DHTML / AJAX movement bases on that.

See also
<http://www.w3.org/TR/2000/REC-DOM-Level-2-Core-20001113/idl-definitions.html>

A very interesting and very stretching use of javascript: URLs can be
found at <http://www.squarefree.com/bookmarklets/>. Highly recommended.

Ben

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/