1 edit
Originally posted by PhlabibitWith 4.0 you don't even need any (greasemonkey) add-on, you just install them directly.
Do the greasemonkey scripts work with Chrome?
However, the thread highlighting (unread threads in bold) doesn't work so well and that's probably the most useful GM extension for me.
How is chrome security-wise? I have run into a vbulletin forum in the last week or two and the baddies had inserted a url meta refresh that auto-redirected to a site that did a "virus scan" and for people with scripting enabled would launch all sort of nasties on your PC.
Can chrome defend against these kind of attacks?
Originally posted by enrico20Google Chrome seems pretty strong security wise to me. During the "virus scan" I guess there was user intervention required to actually perform the "scan"?
How is chrome security-wise? I have run into a vbulletin forum in the last week or two and the baddies had inserted a url meta refresh that auto-redirected to a site that did a "virus scan" and for people with scripting enabled would launch all sort of nasties on your PC.
Can chrome defend against these kind of attacks?
It is a case of best practices while browsing the web as you cannot stop users from specifically running dodgy software.
Originally posted by lauseyvbulletin is the best forum software so its not a case of it being badly written. The version the forum was using was un-patched and so was vulnerable to an injection attack. Here is a similar attack :-
I need to add that redirection is a common and useful feature in web development. It shows that that bulletin board service was very badly written to not filter out code in their posts.
http://www.vbulletin.com/forum/showthread.php?338741-vBulletin-Footer-SQL-Injection-Hack