Re: [Bug-gnuzilla] A need of a paradigm shift for solving the JavaScript Trap

[Jeffrey 'jf' Lim]

On Sat, Nov 15, 2014 at 10:59 AM, Julian <address@hidden> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 11/14/2014 09:14 PM, Nik Nyby wrote:
>> I've also thought about this, and my conclusion was that it's
>> simpler to turn off javascript and click "view source" to see any
>> images, files, or text the JavaScript contains.
>
> Simpler in the short-term, but it seems it must be possible to do this
> in software, and it would make the job worlds easier if it is. For
> example, scripts can be trivially searched for HTTP links, and the CSS
> style can be analyzed to figure out if stuff is hidden (e.g. by the
> CSS display attribute). With things like that, you would already have
> a lot of bases covered, and it could be improved from there to detect
> less trivial hiding methods, gradually.
>

would it simply be better to have a (better?) javascript
debugger/logger? I have personally wished for something like this. A
"supercharged" debugger with logger that truly helps u understand wth
is going on with a script/s.

-jf