|
- 積分
- 23174
- 貢獻
- 768
- 參與
- 22395
|
明明就係一條youtube link, 入面係咪有健雅毒咖?
dongbb2332 發表於 2017-7-26 10:00 
If I bring the mouse pointer to a link, but not click on it, I can see in the left/bottom corner that it displays the URL of it.
Q: Could this URL (in the left/bottom) be different from the one that my Web browser will go? (don't count that server side can be redirected with an eg.: HTTP 302)
Yes.
for a simple link click, the whole click could be captured by JavaScript and made to do something else, including navigating to a different page
the link could be substituted onmousedown (this is common behaviour for some link-click tracking scripts)
for browsers like Chrome where the address pop-up appears inside the page area, that pop-up could be faked with JavaScript and page elements. In general you can only trust browser UI that appears in the chrome border, outside of page control.
Consequently the address pop-up is a convenience feature but offers no security function. |
|
發表於 2017-7-24 22:04
| 
