[Greasemonkey] Alternative script injection technique proof of
concept
Jacob Scherrer
scherrer at gmail.com
Mon Jul 18 18:29:50 EDT 2005
alert("hello!") is working for me with the first (new
this.componentWindow.Object()) approach. Can you think of any other
function calls that may not work? I'd like work on that problem. The
second approach is not ideal since the list of this exclude could
potentially get quite large, and, like you mentioned, there may be
other ways to reach sensitive objects.
More information about the Greasemonkey
mailing list