Other nomination
Spoofing Firefox protected objects
Two ways to spoof document.domain in Firefox, which was assumed protected. Defining a getter with __defineGetter__ overrides the property, and reassigning document.__proto__ and document.prototype to String.__proto__ lets the value be set directly. The getter technique spoofs nearly every object except location, which carries extra checks.
Record
- Researcher
- Gareth Heyes
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Gareth Heyes, first published at the original source. Preserved copies are kept so the citation survives its host.