Guest User

Untitled

a guest
Jun 24th, 2018
64
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.99 KB | None | 0 0
  1. (function () {
  2. /*
  3. XSS prevention via JavaScript
  4. */
  5. var XSSObject = new Object();
  6. XSSObject.lockdown = function (obj, name) {
  7. if (!String.prototype.startsWith) {
  8. try {
  9. if (Object.defineProperty) {
  10. Object.defineProperty(obj, name, {
  11. configurable: false
  12. });
  13. }
  14. } catch (e) { };
  15. }
  16. }
  17. XSSObject.proxy = function (obj, name, report_function_name, exec_original) {
  18. var proxy = obj[name];
  19. obj[name] = function () {
  20. if (exec_original) {
  21. return proxy.apply(this, arguments);
  22. }
  23. };
  24. XSSObject.lockdown(obj, name);
  25. };
  26. XSSObject.proxy(window, 'alert', 'window.alert', false);
  27. XSSObject.proxy(window, 'confirm', 'window.confirm', false);
  28. XSSObject.proxy(window, 'prompt', 'window.prompt', false);
  29. XSSObject.proxy(window, 'unescape', 'unescape', false);
  30. XSSObject.proxy(document, 'write', 'document.write', false);
  31. XSSObject.proxy(String, 'fromCharCode', 'String.fromCharCode', true);
Add Comment
Please, Sign In to add comment