1
vote
1answer
40 views

Web browser | Disabling the download of arbitrary scripts

I use firefox. Is there an addon or setting to stop my browser from downloading all the scripts that are linked on a webpage? I would like to only follow links which are at domains in my whitelist. I ...
0
votes
2answers
48 views

Can XSS and phising type attacks jump across browsers?

If I had two different browsers and separated their use such that I was only ever using browser A for things such as on-line banking and credit card purchases etc. And used browser B for everything ...
0
votes
2answers
110 views

Is it possible to know what is exactly doing javascript when is running?

I know a little about security risks and know that Javascript could be dangerous and compromise my computer, everything was just fine but suddenly reading one article of OWASP that says XSS ...
0
votes
1answer
1k views

Can javascript be used to extract ones IP if they're using a VPN?

If you're using a vpn, is it possible for a 3rd party website to use javascript or any other means to extract your real IP address? Or is there no way for them to know your real IP as long as you're ...
0
votes
1answer
244 views

Does javascript have access to my bookmarks and history?

I'm using RefControl addon for firefox, to avoid sending the referer in the headers. But now I'm wondering if the previous page or even my full history can be viewed by websites with javascript. And ...
8
votes
4answers
3k views

How to hide Browser Plugin Details in firefox for more privacy?

I'm trying to trick the results in this page to have more privacy/anonymity: https://panopticlick.eff.org/index.php?action=log&js=yes So far the best I could do is change the user agent, with the ...
0
votes
2answers
109 views

Is it safe to use an untrusted bookmarklet on a web page with sensitive data?

Is it safe to use an untrusted bookmarklet on a web page containing sensitive data, for example internet banking page? In particular, can a bookmarklet send the data anywhere or execute some actions ...
2
votes
1answer
493 views

What Is All Of This Stuff In My Sent Email From Hotmail? [closed]

I sent an email from my Hotmail account to myself and viewed the source. I did this from www.Hotmail.com and sent only the text 'Test'. When I received the email, I viewed the source in Outlook and ...
0
votes
1answer
241 views

How to adapt a proxy auto-config file to a specific LAN?

I would like my Mac to use specific proxy auto-config settings when inside the office LAN but not use a proxy when connected to any other network. How can I configure it in such a way? I suspect ...
6
votes
5answers
4k views

How dangerous can JavaScript be?

I have recently started using NoScript (in addition to ABP). It took a little while to get used to it and can occasionally require some clicking when visiting a new site to investigate why the site's ...
2
votes
4answers
219 views

What browser feature is this exploiting and how to stop it?

http://raffa991[dot]ra[dot]funpic[dot]de/lol/ Warning: It is some kind of an annoying "you are an idiot" sign combined with a lot of popup message boxes. Open with care! In any case, it crashed my ...
1
vote
3answers
116 views

Is “Just close popup windows” an adequate security instruction for users?

My security officer came to me yesterday, and said the CEO had clicked a "viruses detected, click yes to scan" popup, after which of course his laptop was crawling with viruses. So the SO wants to ...