[Req] Stop those 'are you sure?' boxes, various sites

[leecovuk]

Hello again,

It might be my imagination, but didn't Prox+Sidki use to suppress those 'are you sure' (javascript?) boxes by automatically answering 'yes' ?
I find now, anyway, that various sites for me keep popping them up when, for example, I hit 'log out' or want to 'empty trash' in the case of a webmail site.
No amount of (somewhat randomly) turning on config filters seems to block them.
Is there a generic way to filter these out and say 'yes' to stop them popping up?

Thanks a lot,
Lee

[Kye-U]

I don't think they suppress those confirmation boxes.

One example of what you're talking about is:

Code:

    var answer = confirm("Leave tizag.com?")
    if (answer){
        alert("Bye bye!")
        window.location = "http://www.google.com/";
    }
    else{
        alert("Thanks for sticking around!")
    }

- from http://www.tizag.com/javascriptT/javascriptconfirm.php

I've drawn up a quick filter that may or may not work:

Code:

[Patterns]
Name = "Auto-Confirm [Test]"
Active = TRUE
URL = "($TYPE(htm)|$TYPE(js))"
Limit = 256
Match = "confirm\(*\)"
Replace = "true"

This turns the above example code into:

Code:

    var answer = true
    if (answer){
        alert("Bye bye!")
        window.location = "http://www.google.com/";
    }
    else{
        alert("Thanks for sticking around!")
    }

[leecovuk]

Hello Kye-U and thanks;

Seems to work fine for me!
I've put that as a new filter at the top of web page filters.
I've tried, for example, 'emptying the spam folder' in Yahoo webmail, and also logging out of a Vbulletin forum. Both of those functions now work without asking first for confirmation via a pop up confirmation box.
Very clever !

One thought I had though when first posting / thinking about this ...
I don't know if this would now 'auto accept' on some of those malware popups; you know, the ones which look a bit like a normal confirmation box, inviting you to 'click ok' to get a 'free spyware scan' or something similar ...
I haven't tested or come across that particular scenario in the few minutes since adding this filter (!) but I just thought I'd mention this in case other people reading this try the filter and find it does let nasties through.

[Kye-U]

That's a great point; with the XP Antivirus 2008/9 malware that's circulating on the Internet, this filter would actually aid it in infecting your computer. See a write-up here: http://www.theregister.co.uk/2008/08/22/...print.html

The download + installation process isn't fully automatic (e.g.: you have to click on "Run" / "Download"), so as a safeguard, I'd recommend considering/trying out the two header filters in this topic: http://prxbx.com/forums/showthread.php?tid=1029

I'm glad the filter works for you! It's pretty difficult to manipulate Javascript as the language can be written in countless variations, but I've created some Javascript functions at work that use the confirm function, and I've always stored the clicked value in a variable ("OK" returns true, "Cancel" returns false), so I assume this is a pretty standard practice

[leecovuk]

ok, thanks again.
I do admire guys like you, ProxRocks and others who understand javascript, regular expressions and Sidki's implementation of them.

Lee

[leecovuk]

Hello again, I hope you're all well.
I've noticed by chance that having this auto-confirm filter in circuit takes away the message text area on 'compose' on Yahoo webmail. The text area just vanishes!
Any idea why?

Thanks for any thoughts,
Lee

[leecovuk]

Hello again,

I let this go / ignored it, but the Compose area vanishing is still happening as per my last post above. Just curious why, really.
I'm still not great at debugging these things but am inching closer.

Thanks,
Lee

[leecovuk]

By the way, how do I turn this filter off for a specific site? Do we have to create a Prox 'keyword' for it then use that in IncludeExclude-U?

I ask, as coincidentally, I think I've isolated a problem on another site to this filter. This was another site I've given up on for some time, and just used a generic bypass list entry.

Thanks again,
Lee