javascript 富文本编辑器中出现奇怪的元素
网络上基于 javascript 的富文本编辑器中出现了大量奇怪的 HTML 表单元素。 我能找到的第一个证据是在 joomla 论坛 不到一个月前。 此后，也有来自 drupal 用户和wordpress 用户，现在有证据表明这一点 整个网络——最后，我们刚刚在我负责的一个网站上收到了一份关于此问题的报告。 好像仅限firefox。
有什么想法这是从哪里来的，以及如何阻止它吗？ 有一些模糊的提及卸载 Firefox 和运行恶意软件扫描程序，但没有具体说明。
There's been a rash of strange HTML form elements showing up in javascript-based rich text editors all around the web. The first evidence I can find of this is in the joomla forums a little under a month ago. Since then there have also been reports from drupal users and wordpress users, and there's now evidence of this all over the web -- and finally, we've just had a report of this on a site I'm responsible for. It seems to be limited to firefox.
Any ideas where this is coming from, and how to stop it? There are some vague mentions of uninstalling firefox and running malware scanners, but nothing specific.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（5）
这行代码非常清晰：
gwProxy / jsProxy 代码嵌入到帖子中
奇怪的 gwProxy 代码插入 WYSIWYG 文本区域
看起来由于恶意主题或附加组件，有一个代理已使用 FCKeditor 和 JCE 编辑器嵌入到用户代码中。
来自 support.mozilla.com：
您可以在安全模式下启动 Firefox，检查是否是您的某个附加组件导致了您的问题（切换到默认主题：工具 > 附加组件 > 主题）。
请参阅扩展和主题疑难解答
如果它在安全模式下工作，请禁用所有扩展，然后尝试通过一次启用一个扩展来查找导致该问题的原因，直到问题再次出现。
您可以在安全模式启动窗口中使用“禁用所有加载项”。
每次更改后您都必须关闭并重新启动 Firefox（文件 > 退出）。
对不起我的英语！
不要犹豫，对这篇文章发表评论。
This line of code is definitively clear:
gwProxy / jsProxy code being embedded into posts
Weird gwProxy code is inserted in WYSIWYG textareas
iT seems that there is a proxy that's been embeeded into users code using a FCKeditor an JCE editor due to a malicious theme or add-on.
From support.mozilla.com:
You can start Firefox in Safe Mode to check if one of your add-ons is causing your problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
See Troubleshooting extensions and themes
If it does work in Safe-mode then disable all your extensions and then try to find which is causing it by enabling one at a time until the problem reappears.
You can use "Disable all add-ons" on the Safe mode start window.
You have to close and restart Firefox after each change (File > Exit).
Sorry about my english!
Don't hesitate to comment over this post.
您是否碰巧安装了名为“浏览器荧光笔”[1] 的 Firefox 插件？ 它可能是与 Skype 插件一起安装的，也可能是独立安装的（据说它与 eBay 有某种连接）。
我见过两个人 [2]、[3] 发帖称卸载“浏览器荧光笔”插件可以解决问题。 它可能不是一个恶意小部件，只是一个出现故障的小部件。 卸载它或禁用它并告诉我们？
如果是这种情况，您可以指示用户删除或禁用他们这边的加载项（在他们的浏览器中）。
您还必须将其从发布到您网站的数据中删除。 如果您使用第三方 CMS（Wordpress、Joomla 等）并且您不是程序员，则您必须找人来监视有问题的文本并将其删除。
[1] http://www.browserhighlighter.com/
[2] 案例 #1
[3] 案例#2
By chance do you have a Firefox add-on called 'Browser Highlighter' [1] installed? It might have been installed with a Skype add-on or independently (supposedly it has some connection to eBay).
I've seen two people [2], [3] post that uninstalling the 'Browser Highlighter' add-on does the trick. It's probably not a malicious widget, just a malfunctioning one. Uninstall it or disable it and let us know?
If that is the case, you can instruct your users on removing or disabling the add-on on their side (in their browser).
You will also have to remove it from posted data to your site. If you're using a third-party CMS (Wordpress, Joomla, etc) and you're not a programmer, you're going to have to get someone to watch for the offending text and strip it out.
[1] http://www.browserhighlighter.com/
[2] Case #1
[3] Case #2
你说的“停止”是什么意思？ 如果您知道存在特定于特定版本的 Firefox 的问题，并且您想阻止它，您可以在保存字段之前检查某人提交字段时是否存在问题，或者在保存字段之后但在您之前将其从数据中删除。加载它，或者检查该版本的 Firefox 并阻止使用该版本的用户在您的网站上提交内容（我不建议这样做）。
我几乎不认为您可以告诉您的用户卸载 Firefox，但是您可以通过这些其他选项来处理该问题对您网站的影响。
What do you mean by "stop it"? If you know that there is problem that is specific to a particular version of Firefox and you want to prevent it you either check for the issue when someone submits the field before you save it, you remove it from the data after its saved but before you load it, or you check for that version of Firefox and prevent users with it from making a submission on your site (which I wouldn't recommend).
I hardly think you can tell your users to uninstall Firefox, but you have these other options to deal with how the problem affects your site.
我相信您可能会用富文本编辑器和 Firefox 插件来转移注意力。 这段代码被注入到我的一个没有有富文本编辑器的页面并且它被注入到 IE、Chrome 和 Firefox 上的页面。 我确实看到一篇文章提到了 Skype 插件。
I believe you may be chasing a red herring with the rich text editor and Firefox add-in causes. This code is being injected into one of my pages that does not have a rich text editor and it is being injected into the page on IE, Chrome and Firefox. I did see a post that pointed to a Skype add-in.
从您提供的链接来看，这对我来说听起来并不太模糊。 它是某种恶意软件，会自动将 JavaScript 插入到您发布的内容中，可能会以某种方式攻击您网站的访问者。 将其设置为插入到常见的 CMS 编辑器中可能会让很多人在不知不觉中发布它。
给出了各种删除它的说明，这篇文章似乎可能有效： 问题出在浏览器中- 删除并重新安装
From the links you gave, it doesn't sound too vague to me. It's some sort of malware that auto-inserts the javascript into things you post, probably to attack visitors to your site somehow. Having it set up to insert into common CMS editors will probably get a large number of people to post it unknowingly.
There were various instructions given for removing it, this post seems like it would probably work: Problem is in browsers - remove and reinstall