Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
icon3.gif   Using Javascript files , posted by Robin Peterson on Wed Mar 31 04:22:57 2004 
    icon2.gif   Re: Using Javascript files , posted by Stefan Ritt on Mon Apr 5 09:28:19 2004 
Message ID: 522     Entry time: Mon Apr 5 09:28:19 2004     In reply to: 517
Icon: Reply  Author: Stefan Ritt  Author Email: stefan.ritt@psi.ch 
Category: Info  OS: Windows  ELOG Version: 2.5.2 
Subject: Re: Using Javascript files  
> I develop multiple client server apps and web apps deployed on intranets. I
> need my users to send me bugs with screenshots attached.

Nice idea. I was looking myself for a way to automatically attach screenshots,
but I haven't found a clever way yet. One problem with attachments I found is
that it is not possible to preset the attachment text box with a file name
because this would open up a big security hole. So a malicious web page would
preset the attachment box with a file name pointing to some local password file,
then hide the box somwhere by using a tiny font etc. So if someone presses
"submit", the secret file would automatically transferred to the remote site.
Now I don't know if this can be bypassed with JavaScript.
 
> Now apparently that wasn't fully working or at least you couldn't bring up
> multiple alerts. Has that been fixed, or is it just a problem with alerts?

The JavaScript you supply simply gets copied to the web page and executed. There
are no limitations of any kind from the elog system there. So if you have
problems, it's most likely a JavaScript problem. I found it very useful to use
the Venkman debugger (http://www.mozilla.org/projects/venkman/) which can run
inside Mozilla based browsers.

> Can I write a url that has my attributes, plus a short js script that just
> adds an attachment?

It should be in principle possible, limited maybe only with the security note I
wrote above. If you get anything working, I would appreciate if you could add
this to the "contributions" section, so that other people can benefit from this.
ELOG V3.1.5-fe60aaf