4 ms·

eval() an obfuscated piece of code from the web, what could possibly go wrong?

• emillon 13y ago
  Evaluating javascript from the web is what your browser does when loading a page.
  • Piskvorrr 13y ago
    To nitpick, no it doesn't: there's some difference between "evaluation" and "interpretation;" not to mention JS scopes and such :) However, "load, parse and execute this resource, statically referenced in a SCRIPT tag" doesn't raise quite as many red flags as "execute this _obfuscated_ code". Sure, you could de-obfuscate it (as someone already did in the discussion) and check that it doesn't do anything nasty (e.g. "like" a few dozen pages for you); but the decision is heavily weighted towards "eh, don't bother."
• slowmotiony 13y ago
  You can decode the base64. :-) I had a look inside and I don't see anything suspicious, just some css manipulation.