search

HowNetWorks / uriteller

A service for monitoring whether chat apps etc. leak URLs
MIT License
56 stars 3 forks source link

Test whether Bot/Visitor executes JavaScript #33

Open rugk opened 7 years ago

rugk commented 7 years ago

It would be interesting to know, whether the visit is just a static one (curl-like, download-only) or if the visitor actually executes JavaScript.

jviide commented 7 years ago

That's a cool idea! We could embed <script> tags containing JavaScript that sends a unique token to URI:teller. Maybe there's some more straightforward way that I'm missing, though :)

Currently we're a bit busy here, but this is definitely something to consider in the future. This feature might take some code reshuffling, as the current assumption is that each trap visit is immutable and doesn't update after it's initially fetched to the monitor page. But it would be a plus to get rid of such an assumption anyway.