📜 ⬆️ ⬇️

Google has released an extension for Chrome that tracks potentially dangerous web applications.



Google has recently announced the release of a new experimental extension for the Chrome browser, which will make it possible to detect errors in the “client-side” code leading to the appearance of various vulnerabilities. The extension is called DOM Snitch, and it is capable of intercepting JavaScript calls, allowing you to track the operation of various functions. According to the creators of DOM Snitch, the extension is primarily intended for developers and testers.

Among other features, DOM Snitch allows you to understand how the created web application will behave on the client side. You can also detect third-party web applications that can be potentially dangerous. DOM Snitch can intercept potentially dangerous JavaScript calls, such as document.write or HTMLElement.innerHTML (among others ). As soon as the JavaScript call is intercepted, the extension records the URLs of the document and other characteristics, allowing you to study the behavior of the script as a whole.
')
Here are some of the advantages of expansion, which, according to its creators, can be useful to the target group:

Real-time mode: developers can track DOM modifications without needing to dig into JavaScript using a debugger, suspending application execution;

Easy to use: the extension can be used by experienced developers and testers as well as beginners. The extension shows areas of code that require special attention;

Collaboration: Developers can export found DOM modifications by sharing data with each other.

Download DOM Snitch here.

Source: https://habr.com/ru/post/122494/


All Articles