Comments on: AJAX For Evil: Spyjax

By: sneaky

sneaky — Mon, 29 Aug 2011 18:06:17 +0000

I’m sorry – maybe I’m not understanding this… Where do you throw the javascript? In other words, how do you install this on a page?

I get that you throw the CSS in-line, then the PHP in the body, but I don’t know anything about javascript. When I copy/paste this code into a page, everything below the //inject! line simply displays, instead of parsing…

Sorry to be an idiot – thanks!

By: David Walsh

David Walsh — Mon, 29 Aug 2011 02:58:23 +0000

Most browsers have prevented this method!

By: Me

Me — Mon, 29 Aug 2011 02:37:41 +0000

Is this method still valid? and for what browsers?

By: Santiago

Santiago — Thu, 28 Jul 2011 13:52:21 +0000

I think there’s a little problem. It doesn’t seem to work. it says i’ve not visited those links, but i did.

Maybe this line is bugged:

if(anchor.getStyle(‘color’) == ‘#ff0000′) {

I think you should check for #f00, like the style says.

What do you think?

By: David Walsh

David Walsh — Sun, 29 Nov 2009 17:48:48 +0000

@Chris: Agreed.

By: Chris

Chris — Sun, 29 Nov 2009 17:03:55 +0000

I think this has been flagged by Mozilla for ages as a bug to fix, but there’s really no way to fix it other than to remove a:visited altogether. I mean, you could get rid of a:visited altogether, but that’s much worse than knowing about a handful of sites I might have visited before.

By: Seth

Seth — Mon, 16 Nov 2009 16:14:10 +0000

I personally think it’s very important. This isn’t new to the web…it’s not checking anything that is private…and the majority of the time it is used to serve better/more targeted information. Basically, if I’m forced to look at an ad why not be an ad that is relative to my tastes?

By: David Walsh

David Walsh — Sun, 15 Nov 2009 17:13:08 +0000

@David: Nope — this is a well known technique.

By: David

David — Sun, 15 Nov 2009 17:08:01 +0000

Did you report that already the browser producers?

By: qwaxys

qwaxys — Wed, 17 Dec 2008 17:00:18 +0000

Ben: sending information to the server doesn’t require XMLHttpRequest
you could simply create a 1×1 pixel image and let it load with javascript
example: yourdomain.com/pre-ajax/q1/data1/q2/data2/image.gif