archon-runtime / archon-runtime.github.io

ARChon Runtime for Chrome
http://archon-runtime.github.io/
47 stars 5 forks source link

Injecting javascript to fully loaded webpages #32

Open kuituhirvi opened 5 years ago

kuituhirvi commented 5 years ago

Noticed this uncommon activity on a search engine results site, ie. the top search results changing after the page had finished loading. Then red flags rose when visiting my own site, which contains no scripts, and yet after html tag there were two scripts tags.

Later noticed that only ARChon runs after the page is fully loaded. Did some testing by only allowing it to execute when pressed and confirmed that after each press ZapMeta-adverts were being injected onto the by then fully rendered site.

Nothing truly harmful, so far, has appeared as a side effect but still it forced a complete removal from Chromium. Better safe than sorry.