Tuesday, November 28, 2006

Google redirect

Google has circumvented the guarantee that the address (of a search result) displayed in the status bar when hovering over a link is actually the link you go to when you click. I had dom.disable_window_status_change set to true, so I thought I was immune to Javascript tricks that modify the status bar.

On Firefox 1.5.0.8 [Win], the way to see the real address it to right-click and then hit the Escape key. I'm not sure how consistently they use the redirector. The magic seems to be some Javascript invoked on the "onmousedown" property of the <a> tag.

<a class=l href="http://www.pandora.com/" onmousedown="return rwt(this,'','','res','1',...)" and above function(){window.rwt = function(el,oi,cad,ct,cd,sg_url,sg) {var e = window.encodeURIComponent ? encodeURIComponent : escape;var oi_param="";var cad_param="";var p = el.href.split("#");var sig_url="";if (oi) oi_param="&oi="+e(oi);if (cad) cad_param="&cad="+e(cad); if (sg_url) sig_url="&usg="+sg_url; el.href="/url?sa=t" +oi_param+cad_param+"&ct=" +e(ct)+"&cd=" +e(cd)+"&url=" +e(p[0]).replace(/\+/g,"%2B")+ ...

No comments :