加载中…hm.baidu.com/hm.js 源码分析
(2015-12-21 06:27:52)最近网站被挂载了hm.baidu.com/hm.js
这个js文件，但是程序中是没有的，用chrome打开没有内容，这个网页的源码需要，设置referer可以访问到。
通过此文章了解到，http://drops.wooyun.org/papers/5398
有人在中间做了手脚，目前解决办法，只能通过css 隐藏iframe！
(function(){var
h={},mt={},c={id:"1b78f52870e292db0612b72b3837ffd0",dm:["reddot.xiaoyun.com"],js:"tongji.baidu.com/hm-web/js/",etrk:[],icon:'',ctrk:false,align:-1,nv:-1,vdur:1800000,age:31536000000,rec:0,rp:[],trust:0,vcard:0,qiao:0,lxb:0,conv:0,med:0,cvcc:{q:/tencent:\/\/|qq\.(com|htm)|kefu|openkf|swt|zoos|53kf|doyoo|looyu|leyu|zixun|chat|talk|openQQ|open_ask|online/i},cvcf:[],apps:''};var
r=void 0,s=!0,t=null,w=!1;mt.j={};mt.j.T=/msie
(\d+\.\d+)/i.test(navigator.userAgent);mt.j.ya=/msie
(\d+\.\d+)/i.test(navigator.userAgent)?document.documentMode||+RegExp.$1:r;mt.j.cookieEnabled=navigator.cookieEnabled;mt.j.javaEnabled=navigator.javaEnabled();mt.j.language=navigator.language||navigator.browserLanguage||navigator.systemLanguage||navigator.userLanguage||"";mt.j.Da=(window.screen.width||0)+"x"+(window.screen.height||0);mt.j.colorDepth=window.screen.colorDepth||0;mt.cookie={};
mt.cookie.set=function(a,b,f){var d;f.H&&(d=new
Date,d.setTime(d.getTime()+f.H));document.cookie=a+"="+b+(f.domain?";
domain="+f.domain:"")+(f.path?"; path="+f.path:"")+(d?";
expires="+d.toGMTString():"")+(f.Za?";
secure":"")};mt.cookie.get=function(a){return(a=RegExp("(^|
)"+a+"=([^;]*)(;|$)").exec(document.cookie))?a[2]:t};mt.r={};mt.r.ka=function(a){return
document.getElementByIdx_x(a)};mt.r.Sa=function(a,b){for(b=b.toUpperCase();(a=a.parentNode)&&1==a.nodeType;)if(a.tagName==b)return
a;return t};
(mt.r.Y=function(){function a(){if(!a.B){a.B=s;for(var
b=0,e=d.length;b
e,w),window.addEventListener("load",a,w);else
if(document.attachEvent){document.attachEvent("onreadystatechange",e);window.attachEvent("onload",a);var
d=w;try{d=window.frameElement==t}catch(n){}document.documentElement.doScroll&&d&&b()}})();return
function(b){a.B?b():d.push(b)}}()).B=w;mt.event={};mt.event.c=function(a,b,f){a.attachEvent?a.attachEvent("on"+b,function(b){f.call(a,b)}):a.addEventListener&&a.addEventListener(b,f,w)};
mt.event.preventDefault=function(a){a.preventDefault?a.preventDefault():a.returnValue=w};mt.l={};mt.l.parse=function(){return(new
Function('return (" + source + ")'))()};
mt.l.stringify=function(){function
a(a){/["\\\x00-\x1f]/.test(a)&&(a=a.replace(/["\\\x00-\x1f]/g,function(a){var
b=f[a];if(b)return
b;b=a.charCodeAt();return"\\u00"+Math.floor(b/16).toString(16)+(b).toString(16)}));return'"'+a+'"'}function
b(a){return 10>a?"0"+a:a}var
f={"\b":"\\b","\t":"\\t","\n":"\\n","\f":"\\f","\r":"\\r",'"':'\"',"\":"\\\"};return
function(d){switch(typeof d){case
"undefined":return"undefined";case "number":return
isFinite(d)?String(d):"null";case "string":return a(d);case
"boolean":return String(d);
default:if(d===t)return"null";if(d instanceof Array){var
e=["["],f=d.length,n,g,k;for(g=0;g
d[f],typeof k){case "undefined":case "unknown":case
"function":break;default:e&&n.push(","),e=1,n.push(g(f)+":"+g(k))}n.push("}");return
n.join("")}}}();mt.lang={};mt.lang.d=function(a,b){return"[object
"+b+"]"==={}.toString.call(a)};mt.lang.Wa=function(a){return
mt.lang.d(a,"Number")&&isFinite(a)};mt.lang.Ya=function(a){return
mt.lang.d(a,"String")};mt.localStorage={};
mt.localStorage.D=function(){if(!mt.localStorage.g)try{mt.localStorage.g=document.createElement_x("input"),mt.localStorage.g.type="hidden",mt.localStorage.g.style.display="none",mt.localStorage.g.addBehavior("#default#userData"),document.getElementsByTagName_r("head")[0].appendChild(mt.localStorage.g)}catch(a){return
w}return s};
mt.localStorage.set=function(a,b,f){var d=new
Date;d.setTime(d.getTime()+f||31536E6);try{window.localStorage?(b=d.getTime()+"|"+b,window.localStorage.setItem(a,b)):mt.localStorage.D()&&(mt.localStorage.g.expires=d.toUTCString(),mt.localStorage.g.load(document.location.hostname),mt.localStorage.g.setAttribute(a,b),mt.localStorage.g.save(document.location.hostname))}catch(e){}};
mt.localStorage.get=function(a){if(window.localStorage){if(a=window.localStorage.getItem(a)){var
b=a.indexOf("|"),f=a.substring(0,b)-0;if(f&&f>(new
Date).getTime())return a.substring(b+1)}}else
if(mt.localStorage.D())try{return
mt.localStorage.g.load(document.location.hostname),mt.localStorage.g.getAttribute(a)}catch(d){}return
t};
mt.localStorage.remove=function(a){if(window.localStorage)window.localStorage.removeItem(a);else
if(mt.localStorage.D())try{mt.localStorage.g.load(document.location.hostname),mt.localStorage.g.removeAttribute(a),mt.localStorage.g.save(document.location.hostname)}catch(b){}};mt.sessionStorage={};mt.sessionStorage.set=function(a,b){if(window.sessionStorage)try{window.sessionStorage.setItem(a,b)}catch(f){}};
mt.sessionStorage.get=function(a){return
window.sessionStorage?window.sessionStorage.getItem(a):t};mt.sessionStorage.remove=function(a){window.sessionStorage&&window.sessionStorage.removeItem(a)};mt.O={};mt.O.log=function(a,b){var
f=new
Image,d="mini_tangram_log_"+Math.floor(2147483648*Math.random()).toString(36);window[d]=f;f.onload=f.onerror=f.onabort=function(){f.onload=f.onerror=f.onabort=t;f=window[d]=t;b&&b(a)};f.src=a};mt.P={};
mt.P.ra=function(){var
a="";if(navigator.plugins&&navigator.mimeTypes.length){var
b=navigator.plugins["Shockwave
Flash"];b&&b.description&&(a=b.description.replace(/^.*\s+(\S+)\s+\S+$/,"$1"))}else
if(window.ActiveXObject)try{if(b=new
ActiveXObject("ShockwaveFlash.ShockwaveFlash"))(a=b.GetVariable("$version"))&&(a=a.replace(/^.*\s+(\d+),(\d+).*$/,"$1.$2"))}catch(f){}return
a};
mt.P.Qa=function(a,b,f,d,e){return''};mt.url={};
mt.url.k=function(a,b){var
f=a.match(RegExp("(^|&|\\?|#)("+b+")=([^
喜欢
0
赠金笔