RE: Execution of Javascript from PERL

There are four perl modules available on CPAN related to Javascript: Data::JavaScript - convert perl objects to JavaScript objects by generating JS code
Data::JavaScript::LiteObject - same as above, not sure about difference JavaScript - execute JavaScript from within Perl (XS interface to Mozilla Spidermonkey JS interpreter)
JavaScript::Toolbox - Objects to render cool JavaScript stuff from your CGI The real problem is not getting the JavaScript in the page to execute, it's getting it to execute in a meaningful context - the browser provides a large number of functions that client script can call (though apparently none for examining the server certificate, but that's another thread), and it provides a bunch of objects that represent the current frameset. Most of the functions operate on the object, so you could write them once probably. And you would have to write a function that converts a frameset or page to a DOM object accessible from the context in which the scripts are run.

Then, you have to go through the page and decide how, when, and with what parameters to run each script.

Alternately, you might be able to host a browser object (at least on win32), and get it to do most of the hard work for you.

Good luck!

Phil

> -----Original Message-----
> From: EEshwar [mailto:eeshwarf@indiatimes.com]
> Sent: Thursday, April 17, 2003 6:53 AM
> To: webappsec@securityfocus.com
> Subject: Execution of Javascript from PERL
>
>
>
>
> Hi,
>
>
>
> We are developing a tool in PERL to analyze vulnerabilities
Received on Thu Apr 17 11:05:35 2003