Javascript Extractor: Should an embedded script block also be considered malicious?

openeduhub / metalookup

Provide metadata about domains w.r.t accessibility, licencing, adds, etc.

GNU General Public License v3.0

5 stars 0 forks source link

Javascript Extractor: Should an embedded script block also be considered malicious? #151

Open MRuecklCC opened 2 years ago

MRuecklCC commented 2 years ago

Currently, the Javascript Extractor only considers script blocks as malicious if they load the script via a src attribute. Eventually we want to extend that to also consider embedded script blocks as potentially malicious?