As many of you know, hidden links can be a significant for threat one's security all throughout the Internet, not limited to just Epicmafia. To combat this threat, have made a greasemonkey script that will detect and alert you of any hidden links on the current page. This script works on every website, including sites that have real-time updates like Skype.
Normal links will be unaffected, links that go to a destination other than what they appear to go to are highlighted in yellow, and any links that will run JavaScript when they're clicked are highlighted in red.
Hovering over the links will also show you the real destination, or in the case of a JavaScript link, the script that will be run when you click on it.
As always, notify me of any issues or exploits you may find in the script.
no he fixed regular javascript in front of links, which should stump most people, just needs to check for whitespace in front now since browsers ignore it when reading links
edit: nevermind, only the first hidden link was removed, not subsequent ones
Most allow you to insert custom text for your link text, which can be used to create a link that actually visits another destination (making any get request without CSRF verification vulnerable). Web Skype is vulnerable to this, which is why I added the interval. I should limit the interval to just Skype, though.
That's what every page with JQuery already does, including most pages on EM.
