[Greasemonkey] gmdetect.js

Mark Pilgrim pilgrim at gmail.com
Tue Jul 19 11:26:32 EDT 2005

On 7/19/05, Jeremy Dunck <jdunck at gmail.com> wrote:
> The leaking APIs can only be detected if injection actually occurs.
> So, you happen to not be injecting on the warning pages.  This does
> not imply general safety.

Jeremy is correct.  The detection script is limited to detecting
injected scripts.  If you are not injecting anything on the warning
page, then the warning will not trigger.  Your GM is still vulnerable.


More information about the Greasemonkey mailing list