[Greasemonkey] Alternative script injection technique proof of concept

Jacob Scherrer scherrer at gmail.com
Mon Jul 18 18:29:50 EDT 2005


alert("hello!") is working for me with the first (new
this.componentWindow.Object()) approach. Can you think of any other
function calls that may not work? I'd like work on that problem. The
second approach is not ideal since the list of this exclude could
potentially get quite large, and, like you mentioned, there may be
other ways to reach sensitive objects.


More information about the Greasemonkey mailing list