This is a read-only archive of the old Scratch 1.x Forums.
Try searching the current Scratch discussion forums.

#76 2012-01-01 05:47:13

Hardmath123
Scratcher
Registered: 2010-02-19
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

Testing some other tags I made myself:
[button]type='button' value="Click me!" onclick="alert('Hi!');"[/button]

Last edited by Hardmath123 (2012-01-01 05:52:50)


Hardmaths-MacBook-Pro:~ Hardmath$ sudo make $(whoami) a sandwich

Offline

 

#77 2012-01-01 05:53:45

Hardmath123
Scratcher
Registered: 2010-02-19
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

And the code...

Code:

// ==UserScript==
// @name           Bookmarklet
// @namespace      Bookmarklet
// @description    Creates bookmarklets
// @include        http://*
// ==/UserScript==
document.body.innerHTML=document.body.innerHTML.replace(/\[button\]/g, "<input type='button' ").replace(/\[\/button\]/g, "/>");

Hardmaths-MacBook-Pro:~ Hardmath$ sudo make $(whoami) a sandwich

Offline

 

#78 2012-01-01 06:57:47

Servine
Scratcher
Registered: 2011-03-19
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

Hardmath123 wrote:

And the code...

Code:

// ==UserScript==
// @name           Bookmarklet
// @namespace      Bookmarklet
// @description    Creates bookmarklets
// @include        http://*
// ==/UserScript==
document.body.innerHTML=document.body.innerHTML.replace(/\[button\]/g, "<input type='button' ").replace(/\[\/button\]/g, "/>");

How do I add this?!


http://bluetetrarpg.x10.mx/usercard/?name=Servine

Offline

 

#79 2012-01-01 07:10:49

ihaveamac
Scratcher
Registered: 2007-09-22
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

[youtube]CAx6Mhc-0j4[/youtube]

That's pretty cool.  big_smile


~ihaveamac - visit ihaveamac.net

Offline

 

#80 2012-01-01 07:19:23

TRocket
Scratcher
Registered: 2009-08-18
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

Servine wrote:

Hardmath123 wrote:

And the code...

Code:

// ==UserScript==
// @name           Bookmarklet
// @namespace      Bookmarklet
// @description    Creates bookmarklets
// @include        http://*
// ==/UserScript==
document.body.innerHTML=document.body.innerHTML.replace(/\[button\]/g, "<input type='button' ").replace(/\[\/button\]/g, "/>");

How do I add this?!

paste the code into a .js file then drag it into chrome


http://i.imgur.com/1QqnHxQ.png

Offline

 

#81 2012-01-01 07:28:09

ZeroLuck
Scratcher
Registered: 2010-02-23
Posts: 500+

Re: Adding the images back in to your scratch forum experience

[img]http://info.scratch.mit.edu/sites/infoscratch.media.mit.edu/files/image/example-Xmas-logo.jpg" onload="alert('This isnt secure!!\nI have your cookie:\n' + document.cookie);" /><img src="[/img]

http://en.wikipedia.org/wiki/Cross-site_scripting

Last edited by ZeroLuck (2012-01-01 07:59:52)


http://3.bp.blogspot.com/-oL2Atzp0Byw/T465vIQ36dI/AAAAAAAAADo/1vqL4PvhkM0/s1600/scratchdachwiki.png

Offline

 

#82 2012-01-01 08:00:16

nathanprocks
Scratcher
Registered: 2011-04-14
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

yay my code works

Code:

// ==UserScript==
// @name           iframe for scratch fora
// @namespace      iframe
// @description    displays iframes on the scratch fora
// @include        http://scratch.mit.edu/forums/viewtopic.php*
// ==/UserScript==
document.body.innerHTML=document.body.innerHTML.replace(/\[iframe\]/g, '<iframe src="').replace(/\[\/iframe\]/g, '" width="500" height="500" scrolling="auto" ></iframe>');

[iframe]http://dl.dropbox.com/u/37687009/Green-ishness%20Blue%20Chrome%20Theme/download.html[/iframe]


http://carrot.cassiedragonandfriends.org/Scratch_Signature/randomsig.php
http://trinary.site40.net/images/scratchrank.php?username=nathanprocks&amp;display=small

Offline

 

#83 2012-01-01 08:02:45

roijac
Scratcher
Registered: 2010-01-19
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

you can actually steal passwords with something like this^^
disabled the script  sad

EDIT: we should also do something about auto-playing scratch projects  smile

Last edited by roijac (2012-01-01 08:05:08)

Offline

 

#84 2012-01-01 08:06:05

ZeroLuck
Scratcher
Registered: 2010-02-23
Posts: 500+

Re: Adding the images back in to your scratch forum experience

roijac wrote:

you can actually steal passwords with something like this^^
disabled the script  sad

Yes you can!
And much more too (the script can also post something in the Scratch forum)!


http://3.bp.blogspot.com/-oL2Atzp0Byw/T465vIQ36dI/AAAAAAAAADo/1vqL4PvhkM0/s1600/scratchdachwiki.png

Offline

 

#85 2012-01-01 08:13:05

Servine
Scratcher
Registered: 2011-03-19
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

how do I add this code to chrome...

// ==UserScript==
// @name           Bookmarklet
// @namespace      Bookmarklet
// @description    Creates bookmarklets
// @include        http://*
// ==/UserScript==
document.body.innerHTML=document.body.innerHTML.replace(/\[button\]/g, "<input type='button' ").replace(/\[\/button\]/g, "/>");

And I got a warning about cookies when I visted this page!


http://bluetetrarpg.x10.mx/usercard/?name=Servine

Offline

 

#86 2012-01-01 08:14:06

Servine
Scratcher
Registered: 2011-03-19
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

Anyone else got this...

http://dl.dropbox.com/u/41073707/Capture.PNG
neutral


http://bluetetrarpg.x10.mx/usercard/?name=Servine

Offline

 

#87 2012-01-01 08:17:57

ZeroLuck
Scratcher
Registered: 2010-02-23
Posts: 500+

Re: Adding the images back in to your scratch forum experience

Servine wrote:

Anyone else got this...

http://dl.dropbox.com/u/41073707/Capture.PNG
neutral

Yes. That is my XSS script.
I made it to show everybody that this "Adding the images back in to your scratch forum"
is very very dangerous: Somebody can get your Scratch account and write things in
the Scratch forum and much more!

You should disable the script!


http://3.bp.blogspot.com/-oL2Atzp0Byw/T465vIQ36dI/AAAAAAAAADo/1vqL4PvhkM0/s1600/scratchdachwiki.png

Offline

 

#88 2012-01-01 08:19:02

Servine
Scratcher
Registered: 2011-03-19
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

ZeroLuck wrote:

Servine wrote:

Anyone else got this...

http://dl.dropbox.com/u/41073707/Capture.PNG
neutral

Yes. That is my XSS script.
I made it to show everybody that this "Adding the images back in to your scratch forum"
is very very dangerous: Somebody can get your Scratch account and write things in
the Scratch forum and much more!

You should disable the script!

Oh. But how else can we see images?


http://bluetetrarpg.x10.mx/usercard/?name=Servine

Offline

 

#89 2012-01-01 08:19:37

ZeroLuck
Scratcher
Registered: 2010-02-23
Posts: 500+

Re: Adding the images back in to your scratch forum experience

Servine wrote:

ZeroLuck wrote:

Servine wrote:

Anyone else got this...

http://dl.dropbox.com/u/41073707/Capture.PNG
neutral

Yes. That is my XSS script.
I made it to show everybody that this "Adding the images back in to your scratch forum"
is very very dangerous: Somebody can get your Scratch account and write things in
the Scratch forum and much more!

You should disable the script!

Oh. But how else can we see images?

lol


http://3.bp.blogspot.com/-oL2Atzp0Byw/T465vIQ36dI/AAAAAAAAADo/1vqL4PvhkM0/s1600/scratchdachwiki.png

Offline

 

#90 2012-01-01 09:09:13

rookwood101
Scratcher
Registered: 2011-07-29
Posts: 500+

Re: Adding the images back in to your scratch forum experience

ZeroLuck wrote:

Servine wrote:

ZeroLuck wrote:


Yes. That is my XSS script.
I made it to show everybody that this "Adding the images back in to your scratch forum"
is very very dangerous: Somebody can get your Scratch account and write things in
the Scratch forum and much more!

You should disable the script!

Oh. But how else can we see images?

lol

I could make the script more secure, and make it check what you enter in the field, but I'm too lazy, maybe later.


http://i.imgur.com/zeIZW.png

Offline

 

#91 2012-01-01 09:25:37

fire219
Scratcher
Registered: 2008-02-07
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

Yup, I just got the "I have your cookie" script a minute ago.  hmm

I might disable the script for now. I don't want his XSS script munching on anymore of my cookies. >:-(  tongue


http://bluetetrarpg.x10.mx/usercard/img.php?name=fire219

Offline

 

#92 2012-01-01 09:38:04

ZeroLuck
Scratcher
Registered: 2010-02-23
Posts: 500+

Re: Adding the images back in to your scratch forum experience

rookwood101 wrote:

ZeroLuck wrote:

Servine wrote:


Oh. But how else can we see images?

lol

I could make the script more secure, and make it check what you enter in the field, but I'm too lazy, maybe later.

Lol you are lazy when your script is very very dangerous?
Everybody can lost his account!


http://3.bp.blogspot.com/-oL2Atzp0Byw/T465vIQ36dI/AAAAAAAAADo/1vqL4PvhkM0/s1600/scratchdachwiki.png

Offline

 

#93 2012-01-01 09:40:48

gbear605
Scratcher
Registered: 2008-03-06
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

It is secure if you write the file yourself  tongue   otherwise, you just have to trust that person.


Yeah, I'm mostly inactive.  I check in once in a while though.  If you want to contact me, I have a contact form at my website, http://escratch.org

Offline

 

#94 2012-01-01 10:15:58

roijac
Scratcher
Registered: 2010-01-19
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

not sure if it helps, but
http://api.jquery.com/event.preventDefault/

Offline

 

#95 2012-01-01 11:16:42

rookwood101
Scratcher
Registered: 2011-07-29
Posts: 500+

Re: Adding the images back in to your scratch forum experience

Don't worry guys, I'm working on making it more secure, so it only accepts urls on the image tags, and only relevant stuff for the other things.


http://i.imgur.com/zeIZW.png

Offline

 

#96 2012-01-01 11:27:44

fungirl123
Scratcher
Registered: 2011-10-09
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

OMG! I just saw this!
THANK YOU SO MUCH!!!!!!!!!!!!:DDDDDD
*dies of happiness*
Wait why does it say that I should disable it? This pop-up from scratch.mit.edu says:
"rookwood's image support is not XSS format! It's better to disable it?
hmm
Awww...and I got all excited...
AND NOW IT SAYS "I HAVE YOUR COOKIE!"

Last edited by fungirl123 (2012-01-01 11:31:33)


http://www.thebrag.com/wp-content/uploads/2011/06/GroupLove_General1_IMG_9057.jpg

Offline

 

#97 2012-01-01 11:35:59

ZeroLuck
Scratcher
Registered: 2010-02-23
Posts: 500+

Re: Adding the images back in to your scratch forum experience

fungirl123 wrote:

OMG! I just saw this!
THANK YOU SO MUCH!!!!!!!!!!!!:DDDDDD
*dies of happiness*
Wait why does it say that I should disable it? This pop-up from scratch.mit.edu says:
"rookwood's image support is not XSS format! It's better to disable it?
hmm
Awww...and I got all excited...
AND NOW IT SAYS "I HAVE YOUR COOKIE!"

Lol, that was me  big_smile
You should disable it because everyone can get your account when you have this
not disabled!

Last edited by ZeroLuck (2012-01-01 11:36:57)


http://3.bp.blogspot.com/-oL2Atzp0Byw/T465vIQ36dI/AAAAAAAAADo/1vqL4PvhkM0/s1600/scratchdachwiki.png

Offline

 

#98 2012-01-01 12:01:42

fungirl123
Scratcher
Registered: 2011-10-09
Posts: 1000+

Re: Adding the images back in to your scratch forum experience

ZeroLuck wrote:

fungirl123 wrote:

OMG! I just saw this!
THANK YOU SO MUCH!!!!!!!!!!!!:DDDDDD
*dies of happiness*
Wait why does it say that I should disable it? This pop-up from scratch.mit.edu says:
"rookwood's image support is not XSS format! It's better to disable it?
hmm
Awww...and I got all excited...
AND NOW IT SAYS "I HAVE YOUR COOKIE!"

Lol, that was me  big_smile
You should disable it because everyone can get your account when you have this
not disabled!

I did  yikes
Are people going to get into my account now??!?!
I'm so noobish lol


http://www.thebrag.com/wp-content/uploads/2011/06/GroupLove_General1_IMG_9057.jpg

Offline

 

#99 2012-01-01 12:10:30

rookwood101
Scratcher
Registered: 2011-07-29
Posts: 500+

Re: Adding the images back in to your scratch forum experience

fungirl123 wrote:

ZeroLuck wrote:

fungirl123 wrote:

OMG! I just saw this!
THANK YOU SO MUCH!!!!!!!!!!!!:DDDDDD
*dies of happiness*
Wait why does it say that I should disable it? This pop-up from scratch.mit.edu says:
"rookwood's image support is not XSS format! It's better to disable it?
hmm
Awww...and I got all excited...
AND NOW IT SAYS "I HAVE YOUR COOKIE!"

Lol, that was me  big_smile
You should disable it because everyone can get your account when you have this
not disabled!

I did  yikes
Are people going to get into my account now??!?!
I'm so noobish lol

no don't worry, zeroluck hasn't actually done anything with the cookie, just displayed it.


http://i.imgur.com/zeIZW.png

Offline

 

#100 2012-01-01 12:11:52

ZeroLuck
Scratcher
Registered: 2010-02-23
Posts: 500+

Re: Adding the images back in to your scratch forum experience

fungirl123 wrote:

I did  yikes
Are people going to get into my account now??!?!
I'm so noobish lol

If you disabled the script nobody can get in your account.


http://3.bp.blogspot.com/-oL2Atzp0Byw/T465vIQ36dI/AAAAAAAAADo/1vqL4PvhkM0/s1600/scratchdachwiki.png

Offline

 

Board footer