diladele / websafety

Simple and powerful web filter for HTTP and HTTPS traffic
https://www.diladele.com
241 stars 24 forks source link

Hide typed characters into JScript bypass access denied box on the blocked page #2199

Open ra-at-diladele-com opened 5 months ago

ra-at-diladele-com commented 5 months ago

Currently we use prompt() function on JScript to get user input. But according to https://stackoverflow.com/questions/9554987/how-can-i-hide-the-password-entered-via-a-javascript-dialog-prompt this cannot mask typed chars.