Userscripts.org

The following is an archive of comments made before threaded discussions was implemented (November 16th, 2008)

will you PLEASE update this script!

How do you check an MD5 sum? I'm not sure, but do we download the MD5 sum from http://www.efoxdesigns.com/max/downloads/Screen Userscripts/ after we install Screen Userscripts?

I am thankful for this script. People like me who are not experts in javascript can have at least a small level of defense against malicious codes.

I'm with Lucanos on this. It's pretty easy to come up with some convoluted expression that yields "document.cookie" and then pass it to eval. It's not that you shouldn't try, but users need to know that there is no guarantee something won't slip through.

An interesting concept - I have had a look at the code (I am no PHP or JavaScript expert, I should point out), but looking for strings which contain "*.php?cookie=*" seems pretty easy to work around - I'd simply change the variable name to "c", or not bother naming it at all.

A simpler (and admittedly, possibly easier circumvented) technique may just be to scan for the string "cookie" inside the script.

Just an idea...

Very nice, I like it :D

If it's possible to scan userscripts for cookie stealing, couldn't us.o do that on their end and flag scripts?

<font>

It's great script but it's slow down firefox but it's worth for me to use it,anyway .....Geranun......

while this is a valiant effort, the MD5 and SHA1 sums do not provide any additional authenticity verification. if the author of this script were to fall victim to a cookie-stealer script that compromised his USO account, the MD5 and SHA1 sums could be spoofed as easily as this script itself.

Nice one!

Ok, the new fetures works, great!

but (jea, again :P)
i think not to scan all scripts on the page, then i go into the script itself, and the "scan-button" disappear.
(after the search, you got 100 scripts, you show one, to intsall it, but then the button from screen userscript ar gone. you know, the page where you can install scripts with this button.)

Same problem here as Gasoline- had - it slows down firefox way to much to use it.

I am using firefox in ubuntu and it just flashes dark for 5-10 seconds (if not more) - all the browssing (tabs) are also freezed

so, ok. ill testet this script
it worked on your testpage, nice!

buuut:
if you got e few scripts on a page (eg search on userscripts for scripts) then the script slows down your computer really much (crash firefox).

featurerequest:
build a button, which the user can press to check the actual homepage/script, or just run your script if someone want to install a script.

i would say, its a featurerequest on greasemonkey addon itselft, they should check the scripts and warn you if the script you will install is malicious. ....

(sorry for my bad englisch ;)

Let me try it :D