Greasemonkey scripts do run in an effective sandbox within the browser, and shouldn't be able to affect your computer outside of Firefox. It is technically feasible to play games like replacing input boxes (in which you might enter passwords or personal info), read any data on the pages, and send data collected to a third party. That being said, a basic rule of thumb is to consider most information on pages with Greasemonkey scripts active to be accessible to those scripts. While it is definitely possible to do all manners of mischief with carte-blanche Javascript access to pages, Greasemonkey scripts are restricted to specific URLs, and will not run on sites that are not specified by the URL patterns in their headers. When used with discretion, Greasemonkey should be perfectly safe to install and use. Unlikely, difficult to do on purpose or maliciously, but it's not a bulletproof utility. There's not much you can do beyond what can already be done with XUL and javascript, but it is possible to trash your mozilla and/or firefox profile, and possibly other parts of your system. Greasemonkey does not alter the websites you visit unless you've loaded it on your system. If you do not load greasemonkey or any of its scripts, it cannot affect you in any way. It's fairly limited and sandboxed, but that doesn't mean it's safe, merely that it's harder for someone to do something nefarious. Don't load scripts onto your system unless you trust the source (in both meanings of the term 'source'). Like anything else you load on your system, greasemonkey can be used against you. It automates things a bit, but other than that if greasemonkey is a security hole, then your website design is flawed - not greasemonkey. Greasemonkey can't do anything to your website that a person with telnet can't already do to your website. It's as safe as you allow it to be - but you aren't very clear, so let's look at it from a few perspectives: Web Developer Considering that GreaseMonkey allows you to let random people on the Internet change the behavior of your favorite websites, how safe can it be?
0 kommentar(er)
