Javascript Injection?
Posted: Sun Oct 17, 2010 10:25 pm
I just saw some weird page requests randomly targeting my javascript directory like the following:
[text]
http://domain.com/js/)+e.data;e.global&&!c.active++&&c.event.trigger(
http://domain.com/js/live.
http://domain.com/js/)e.url+=(ka.test(e.url)
http://domain.com/js/&&!n?r.firstChild& ... es:k[1]===
http://domain.com/js/;e.dataType=
http://domain.com/js/);e.dataType=
http://domain.com/js/.specialChange
http://domain.com/js/*/*
http://domain.com/js/keypress.specialSubmit
on and on...for about 30 more entries in my log.
[/text]
This just looks like garbage to me, but is someone trying something tricky that I'm not seeing? They seem awful persistent. All these requests just get redirected to a standard 404 error page that doesn't echo any user fields (like query strings).
Thanks,
Eric
[text]
http://domain.com/js/)+e.data;e.global&&!c.active++&&c.event.trigger(
http://domain.com/js/live.
http://domain.com/js/)e.url+=(ka.test(e.url)
http://domain.com/js/&&!n?r.firstChild& ... es:k[1]===
http://domain.com/js/;e.dataType=
http://domain.com/js/);e.dataType=
http://domain.com/js/.specialChange
http://domain.com/js/*/*
http://domain.com/js/keypress.specialSubmit
on and on...for about 30 more entries in my log.
[/text]
This just looks like garbage to me, but is someone trying something tricky that I'm not seeing? They seem awful persistent. All these requests just get redirected to a standard 404 error page that doesn't echo any user fields (like query strings).
Thanks,
Eric