"javascript hell" - proz.com profile link in gmail signature linking to jshell.net
Thread poster: Lianne van de Ven

Lianne van de Ven  Identity Verified
United States
Local time: 23:28
Member (2008)
English to Dutch
+ ...
Jan 19, 2016

Hello everyone,

I just discovered that the link to my proz.com profile (that I have had in my gmail signature field for years) started to link to a url of fiddle.jshell.net.

The full link (not sure if it hurts to click it - I just wanted to show the intercepted URL) is:
http://fiddle.jshell.net/PM86Y/1467/show/www.proz.com/translator/787187

Earlier this week I received a reply to one of my mails which included copy of my own mail including signature and I noticed a warning text in bold red inserted in that part of my signature stating that that signature might be impersonating someone else or something along those lines. I put the issue on my list of things to do.

I understand by now that jshell.net must stand for Javascript Hell.

It probablyh started after I installed code to display my Twitter feed and Instagram pics to spruce up my profile page, just a few months ago. This requires you to give your proz.com profile page permission to run javascript when you are installing script and when you view the page. It must be insecure and have allowed for this interception to happen. I removed the Twitter and Instagram content from my profile page (and as precaution also on my website) and the link in my gmail signature goes to the correct page again.

I am curious to know if this has happened to others but I don't have much time to research this now. Looking forward to get some reactions. Thanks.


 


To report site rules violations or get help, contact a site moderator:


You can also contact site staff by submitting a support request »

"javascript hell" - proz.com profile link in gmail signature linking to jshell.net

Advanced search






WordFinder Unlimited
For clarity and excellence

WordFinder is the leading dictionary service that gives you the words you want anywhere, anytime. Access 260+ dictionaries from the world's leading dictionary publishers in virtually any device. Find the right word anywhere, anytime - online or offline.

More info »
Déjà Vu X3
Try it, Love it

Find out why Déjà Vu is today the most flexible, customizable and user-friendly tool on the market. See the brand new features in action: *Completely redesigned user interface *Live Preview *Inline spell checking *Inline

More info »



Forums
  • All of ProZ.com
  • Term search
  • Jobs
  • Forums
  • Multiple search