68 |
78 |
79 | 69 | To view this page ensure that Adobe Flash Player version 70 | 11.1.0 or greater is installed. 71 |
72 | 77 |
107 |
108 |
109 |
--------------------------------------------------------------------------------
/csrf/bin-debug/csrf.swf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/TheRook/CSRF-Request-Builder/177fe51378cf6ca7b10bd04a42a2c791ffd17012/csrf/bin-debug/csrf.swf
--------------------------------------------------------------------------------
/csrf/bin-debug/framework_4.6.0.23201.swf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/TheRook/CSRF-Request-Builder/177fe51378cf6ca7b10bd04a42a2c791ffd17012/csrf/bin-debug/framework_4.6.0.23201.swf
--------------------------------------------------------------------------------
/csrf/bin-debug/history/history.css:
--------------------------------------------------------------------------------
1 | /* This CSS stylesheet defines styles used by required elements in a flex application page that supports browser history */
2 |
3 | #ie_historyFrame { width: 0px; height: 0px; display:none }
4 | #firefox_anchorDiv { width: 0px; height: 0px; display:none }
5 | #safari_formDiv { width: 0px; height: 0px; display:none }
6 | #safari_rememberDiv { width: 0px; height: 0px; display:none }
7 |
--------------------------------------------------------------------------------
/csrf/bin-debug/history/history.js:
--------------------------------------------------------------------------------
1 | BrowserHistoryUtils = {
2 | addEvent: function(elm, evType, fn, useCapture) {
3 | useCapture = useCapture || false;
4 | if (elm.addEventListener) {
5 | elm.addEventListener(evType, fn, useCapture);
6 | return true;
7 | }
8 | else if (elm.attachEvent) {
9 | var r = elm.attachEvent('on' + evType, fn);
10 | return r;
11 | }
12 | else {
13 | elm['on' + evType] = fn;
14 | }
15 | }
16 | }
17 |
18 | BrowserHistory = (function() {
19 | // type of browser
20 | var browser = {
21 | ie: false,
22 | ie8: false,
23 | firefox: false,
24 | safari: false,
25 | opera: false,
26 | version: -1
27 | };
28 |
29 | // Default app state URL to use when no fragment ID present
30 | var defaultHash = '';
31 |
32 | // Last-known app state URL
33 | var currentHref = document.location.href;
34 |
35 | // Initial URL (used only by IE)
36 | var initialHref = document.location.href;
37 |
38 | // Initial URL (used only by IE)
39 | var initialHash = document.location.hash;
40 |
41 | // History frame source URL prefix (used only by IE)
42 | var historyFrameSourcePrefix = 'history/historyFrame.html?';
43 |
44 | // History maintenance (used only by Safari)
45 | var currentHistoryLength = -1;
46 |
47 | // Flag to denote the existence of onhashchange
48 | var browserHasHashChange = false;
49 |
50 | var historyHash = [];
51 |
52 | var initialState = createState(initialHref, initialHref + '#' + initialHash, initialHash);
53 |
54 | var backStack = [];
55 | var forwardStack = [];
56 |
57 | var currentObjectId = null;
58 |
59 | //UserAgent detection
60 | var useragent = navigator.userAgent.toLowerCase();
61 |
62 | if (useragent.indexOf("opera") != -1) {
63 | browser.opera = true;
64 | } else if (useragent.indexOf("msie") != -1) {
65 | browser.ie = true;
66 | browser.version = parseFloat(useragent.substring(useragent.indexOf('msie') + 4));
67 | if (browser.version == 8)
68 | {
69 | browser.ie = false;
70 | browser.ie8 = true;
71 | }
72 | } else if (useragent.indexOf("safari") != -1) {
73 | browser.safari = true;
74 | browser.version = parseFloat(useragent.substring(useragent.indexOf('safari') + 7));
75 | } else if (useragent.indexOf("gecko") != -1) {
76 | browser.firefox = true;
77 | }
78 |
79 | if (browser.ie == true && browser.version == 7) {
80 | window["_ie_firstload"] = false;
81 | }
82 |
83 | function hashChangeHandler()
84 | {
85 | currentHref = document.location.href;
86 | var flexAppUrl = getHash();
87 | //ADR: to fix multiple
88 | if (typeof BrowserHistory_multiple != "undefined" && BrowserHistory_multiple == true) {
89 | var pl = getPlayers();
90 | for (var i = 0; i < pl.length; i++) {
91 | pl[i].browserURLChange(flexAppUrl);
92 | }
93 | } else {
94 | getPlayer().browserURLChange(flexAppUrl);
95 | }
96 | }
97 |
98 | // Accessor functions for obtaining specific elements of the page.
99 | function getHistoryFrame()
100 | {
101 | return document.getElementById('ie_historyFrame');
102 | }
103 |
104 | function getFormElement()
105 | {
106 | return document.getElementById('safari_formDiv');
107 | }
108 |
109 | function getRememberElement()
110 | {
111 | return document.getElementById("safari_remember_field");
112 | }
113 |
114 | // Get the Flash player object for performing ExternalInterface callbacks.
115 | // Updated for changes to SWFObject2.
116 | function getPlayer(id) {
117 | var i;
118 |
119 | if (id && document.getElementById(id)) {
120 | var r = document.getElementById(id);
121 | if (typeof r.SetVariable != "undefined") {
122 | return r;
123 | }
124 | else {
125 | var o = r.getElementsByTagName("object");
126 | var e = r.getElementsByTagName("embed");
127 | for (i = 0; i < o.length; i++) {
128 | if (typeof o[i].browserURLChange != "undefined")
129 | return o[i];
130 | }
131 | for (i = 0; i < e.length; i++) {
132 | if (typeof e[i].browserURLChange != "undefined")
133 | return e[i];
134 | }
135 | }
136 | }
137 | else {
138 | var o = document.getElementsByTagName("object");
139 | var e = document.getElementsByTagName("embed");
140 | for (i = 0; i < e.length; i++) {
141 | if (typeof e[i].browserURLChange != "undefined")
142 | {
143 | return e[i];
144 | }
145 | }
146 | for (i = 0; i < o.length; i++) {
147 | if (typeof o[i].browserURLChange != "undefined")
148 | {
149 | return o[i];
150 | }
151 | }
152 | }
153 | return undefined;
154 | }
155 |
156 | function getPlayers() {
157 | var i;
158 | var players = [];
159 | if (players.length == 0) {
160 | var tmp = document.getElementsByTagName('object');
161 | for (i = 0; i < tmp.length; i++)
162 | {
163 | if (typeof tmp[i].browserURLChange != "undefined")
164 | players.push(tmp[i]);
165 | }
166 | }
167 | if (players.length == 0 || players[0].object == null) {
168 | var tmp = document.getElementsByTagName('embed');
169 | for (i = 0; i < tmp.length; i++)
170 | {
171 | if (typeof tmp[i].browserURLChange != "undefined")
172 | players.push(tmp[i]);
173 | }
174 | }
175 | return players;
176 | }
177 |
178 | function getIframeHash() {
179 | var doc = getHistoryFrame().contentWindow.document;
180 | var hash = String(doc.location.search);
181 | if (hash.length == 1 && hash.charAt(0) == "?") {
182 | hash = "";
183 | }
184 | else if (hash.length >= 2 && hash.charAt(0) == "?") {
185 | hash = hash.substring(1);
186 | }
187 | return hash;
188 | }
189 |
190 | /* Get the current location hash excluding the '#' symbol. */
191 | function getHash() {
192 | // It would be nice if we could use document.location.hash here,
193 | // but it's faulty sometimes.
194 | var idx = document.location.href.indexOf('#');
195 | return (idx >= 0) ? document.location.href.substr(idx+1) : '';
196 | }
197 |
198 | /* Get the current location hash excluding the '#' symbol. */
199 | function setHash(hash) {
200 | // It would be nice if we could use document.location.hash here,
201 | // but it's faulty sometimes.
202 | if (hash == '') hash = '#'
203 | document.location.hash = hash;
204 | }
205 |
206 | function createState(baseUrl, newUrl, flexAppUrl) {
207 | return { 'baseUrl': baseUrl, 'newUrl': newUrl, 'flexAppUrl': flexAppUrl, 'title': null };
208 | }
209 |
210 | /* Add a history entry to the browser.
211 | * baseUrl: the portion of the location prior to the '#'
212 | * newUrl: the entire new URL, including '#' and following fragment
213 | * flexAppUrl: the portion of the location following the '#' only
214 | */
215 | function addHistoryEntry(baseUrl, newUrl, flexAppUrl) {
216 |
217 | //delete all the history entries
218 | forwardStack = [];
219 |
220 | if (browser.ie) {
221 | //Check to see if we are being asked to do a navigate for the first
222 | //history entry, and if so ignore, because it's coming from the creation
223 | //of the history iframe
224 | if (flexAppUrl == defaultHash && document.location.href == initialHref && window['_ie_firstload']) {
225 | currentHref = initialHref;
226 | return;
227 | }
228 | if ((!flexAppUrl || flexAppUrl == defaultHash) && window['_ie_firstload']) {
229 | newUrl = baseUrl + '#' + defaultHash;
230 | flexAppUrl = defaultHash;
231 | } else {
232 | // for IE, tell the history frame to go somewhere without a '#'
233 | // in order to get this entry into the browser history.
234 | getHistoryFrame().src = historyFrameSourcePrefix + flexAppUrl;
235 | }
236 | setHash(flexAppUrl);
237 | } else {
238 |
239 | //ADR
240 | if (backStack.length == 0 && initialState.flexAppUrl == flexAppUrl) {
241 | initialState = createState(baseUrl, newUrl, flexAppUrl);
242 | } else if(backStack.length > 0 && backStack[backStack.length - 1].flexAppUrl == flexAppUrl) {
243 | backStack[backStack.length - 1] = createState(baseUrl, newUrl, flexAppUrl);
244 | }
245 |
246 | if (browser.safari && !browserHasHashChange) {
247 | // for Safari, submit a form whose action points to the desired URL
248 | if (browser.version <= 419.3) {
249 | var file = window.location.pathname.toString();
250 | file = file.substring(file.lastIndexOf("/")+1);
251 | getFormElement().innerHTML = '';
252 | //get the current elements and add them to the form
253 | var qs = window.location.search.substring(1);
254 | var qs_arr = qs.split("&");
255 | for (var i = 0; i < qs_arr.length; i++) {
256 | var tmp = qs_arr[i].split("=");
257 | var elem = document.createElement("input");
258 | elem.type = "hidden";
259 | elem.name = tmp[0];
260 | elem.value = tmp[1];
261 | document.forms.historyForm.appendChild(elem);
262 | }
263 | document.forms.historyForm.submit();
264 | } else {
265 | top.location.hash = flexAppUrl;
266 | }
267 | // We also have to maintain the history by hand for Safari
268 | historyHash[history.length] = flexAppUrl;
269 | _storeStates();
270 | } else {
271 | // Otherwise, just tell the browser to go there
272 | setHash(flexAppUrl);
273 | }
274 | }
275 | backStack.push(createState(baseUrl, newUrl, flexAppUrl));
276 | }
277 |
278 | function _storeStates() {
279 | if (browser.safari) {
280 | getRememberElement().value = historyHash.join(",");
281 | }
282 | }
283 |
284 | function handleBackButton() {
285 | //The "current" page is always at the top of the history stack.
286 | var current = backStack.pop();
287 | if (!current) { return; }
288 | var last = backStack[backStack.length - 1];
289 | if (!last && backStack.length == 0){
290 | last = initialState;
291 | }
292 | forwardStack.push(current);
293 | }
294 |
295 | function handleForwardButton() {
296 | //summary: private method. Do not call this directly.
297 |
298 | var last = forwardStack.pop();
299 | if (!last) { return; }
300 | backStack.push(last);
301 | }
302 |
303 | function handleArbitraryUrl() {
304 | //delete all the history entries
305 | forwardStack = [];
306 | }
307 |
308 | /* Called periodically to poll to see if we need to detect navigation that has occurred */
309 | function checkForUrlChange() {
310 |
311 | if (browser.ie) {
312 | if (currentHref != document.location.href && currentHref + '#' != document.location.href) {
313 | //This occurs when the user has navigated to a specific URL
314 | //within the app, and didn't use browser back/forward
315 | //IE seems to have a bug where it stops updating the URL it
316 | //shows the end-user at this point, but programatically it
317 | //appears to be correct. Do a full app reload to get around
318 | //this issue.
319 | if (browser.version < 7) {
320 | currentHref = document.location.href;
321 | document.location.reload();
322 | } else {
323 | if (getHash() != getIframeHash()) {
324 | // this.iframe.src = this.blankURL + hash;
325 | var sourceToSet = historyFrameSourcePrefix + getHash();
326 | getHistoryFrame().src = sourceToSet;
327 | currentHref = document.location.href;
328 | }
329 | }
330 | }
331 | }
332 |
333 | if (browser.safari && !browserHasHashChange) {
334 | // For Safari, we have to check to see if history.length changed.
335 | if (currentHistoryLength >= 0 && history.length != currentHistoryLength) {
336 | //alert("did change: " + history.length + ", " + historyHash.length + "|" + historyHash[history.length] + "|>" + historyHash.join("|"));
337 | var flexAppUrl = getHash();
338 | if (browser.version < 528.16 /* Anything earlier than Safari 4.0 */)
339 | {
340 | // If it did change and we're running Safari 3.x or earlier,
341 | // then we have to look the old state up in our hand-maintained
342 | // array since document.location.hash won't have changed,
343 | // then call back into BrowserManager.
344 | currentHistoryLength = history.length;
345 | flexAppUrl = historyHash[currentHistoryLength];
346 | }
347 |
348 | //ADR: to fix multiple
349 | if (typeof BrowserHistory_multiple != "undefined" && BrowserHistory_multiple == true) {
350 | var pl = getPlayers();
351 | for (var i = 0; i < pl.length; i++) {
352 | pl[i].browserURLChange(flexAppUrl);
353 | }
354 | } else {
355 | getPlayer().browserURLChange(flexAppUrl);
356 | }
357 | _storeStates();
358 | }
359 | }
360 | if (browser.firefox && !browserHasHashChange) {
361 | if (currentHref != document.location.href) {
362 | var bsl = backStack.length;
363 |
364 | var urlActions = {
365 | back: false,
366 | forward: false,
367 | set: false
368 | }
369 |
370 | if ((window.location.hash == initialHash || window.location.href == initialHref) && (bsl == 1)) {
371 | urlActions.back = true;
372 | // FIXME: could this ever be a forward button?
373 | // we can't clear it because we still need to check for forwards. Ugg.
374 | // clearInterval(this.locationTimer);
375 | handleBackButton();
376 | }
377 |
378 | // first check to see if we could have gone forward. We always halt on
379 | // a no-hash item.
380 | if (forwardStack.length > 0) {
381 | if (forwardStack[forwardStack.length-1].flexAppUrl == getHash()) {
382 | urlActions.forward = true;
383 | handleForwardButton();
384 | }
385 | }
386 |
387 | // ok, that didn't work, try someplace back in the history stack
388 | if ((bsl >= 2) && (backStack[bsl - 2])) {
389 | if (backStack[bsl - 2].flexAppUrl == getHash()) {
390 | urlActions.back = true;
391 | handleBackButton();
392 | }
393 | }
394 |
395 | if (!urlActions.back && !urlActions.forward) {
396 | var foundInStacks = {
397 | back: -1,
398 | forward: -1
399 | }
400 |
401 | for (var i = 0; i < backStack.length; i++) {
402 | if (backStack[i].flexAppUrl == getHash() && i != (bsl - 2)) {
403 | arbitraryUrl = true;
404 | foundInStacks.back = i;
405 | }
406 | }
407 | for (var i = 0; i < forwardStack.length; i++) {
408 | if (forwardStack[i].flexAppUrl == getHash() && i != (bsl - 2)) {
409 | arbitraryUrl = true;
410 | foundInStacks.forward = i;
411 | }
412 | }
413 | handleArbitraryUrl();
414 | }
415 |
416 | // Firefox changed; do a callback into BrowserManager to tell it.
417 | currentHref = document.location.href;
418 | var flexAppUrl = getHash();
419 | //ADR: to fix multiple
420 | if (typeof BrowserHistory_multiple != "undefined" && BrowserHistory_multiple == true) {
421 | var pl = getPlayers();
422 | for (var i = 0; i < pl.length; i++) {
423 | pl[i].browserURLChange(flexAppUrl);
424 | }
425 | } else {
426 | getPlayer().browserURLChange(flexAppUrl);
427 | }
428 | }
429 | }
430 | }
431 |
432 | var _initialize = function () {
433 |
434 | browserHasHashChange = ("onhashchange" in document.body);
435 |
436 | if (browser.ie)
437 | {
438 | var scripts = document.getElementsByTagName('script');
439 | for (var i = 0, s; s = scripts[i]; i++) {
440 | if (s.src.indexOf("history.js") > -1) {
441 | var iframe_location = (new String(s.src)).replace("history.js", "historyFrame.html");
442 | }
443 | }
444 | historyFrameSourcePrefix = iframe_location + "?";
445 | var src = historyFrameSourcePrefix;
446 |
447 | var iframe = document.createElement("iframe");
448 | iframe.id = 'ie_historyFrame';
449 | iframe.name = 'ie_historyFrame';
450 | iframe.src = 'javascript:false;';
451 |
452 | try {
453 | document.body.appendChild(iframe);
454 | } catch(e) {
455 | setTimeout(function() {
456 | document.body.appendChild(iframe);
457 | }, 0);
458 | }
459 | }
460 |
461 | if (browser.safari && !browserHasHashChange)
462 | {
463 | var rememberDiv = document.createElement("div");
464 | rememberDiv.id = 'safari_rememberDiv';
465 | document.body.appendChild(rememberDiv);
466 | rememberDiv.innerHTML = '';
467 |
468 | var formDiv = document.createElement("div");
469 | formDiv.id = 'safari_formDiv';
470 | document.body.appendChild(formDiv);
471 |
472 | var reloader_content = document.createElement('div');
473 | reloader_content.id = 'safarireloader';
474 | var scripts = document.getElementsByTagName('script');
475 | for (var i = 0, s; s = scripts[i]; i++) {
476 | if (s.src.indexOf("history.js") > -1) {
477 | html = (new String(s.src)).replace(".js", ".html");
478 | }
479 | }
480 | reloader_content.innerHTML = '';
481 | document.body.appendChild(reloader_content);
482 | reloader_content.style.position = 'absolute';
483 | reloader_content.style.left = reloader_content.style.top = '-9999px';
484 | iframe = reloader_content.getElementsByTagName('iframe')[0];
485 |
486 | if (document.getElementById("safari_remember_field").value != "" ) {
487 | historyHash = document.getElementById("safari_remember_field").value.split(",");
488 | }
489 | }
490 |
491 | if (browserHasHashChange)
492 | document.body.onhashchange = hashChangeHandler;
493 | }
494 |
495 | return {
496 | historyHash: historyHash,
497 | backStack: function() { return backStack; },
498 | forwardStack: function() { return forwardStack },
499 | getPlayer: getPlayer,
500 | initialize: function(src) {
501 | _initialize(src);
502 | },
503 | setURL: function(url) {
504 | document.location.href = url;
505 | },
506 | getURL: function() {
507 | return document.location.href;
508 | },
509 | getTitle: function() {
510 | return document.title;
511 | },
512 | setTitle: function(title) {
513 | try {
514 | backStack[backStack.length - 1].title = title;
515 | } catch(e) { }
516 | //if on safari, set the title to be the empty string.
517 | if (browser.safari) {
518 | if (title == "") {
519 | try {
520 | var tmp = window.location.href.toString();
521 | title = tmp.substring((tmp.lastIndexOf("/")+1), tmp.lastIndexOf("#"));
522 | } catch(e) {
523 | title = "";
524 | }
525 | }
526 | }
527 | document.title = title;
528 | },
529 | setDefaultURL: function(def)
530 | {
531 | defaultHash = def;
532 | def = getHash();
533 | //trailing ? is important else an extra frame gets added to the history
534 | //when navigating back to the first page. Alternatively could check
535 | //in history frame navigation to compare # and ?.
536 | if (browser.ie)
537 | {
538 | window['_ie_firstload'] = true;
539 | var sourceToSet = historyFrameSourcePrefix + def;
540 | var func = function() {
541 | getHistoryFrame().src = sourceToSet;
542 | window.location.replace("#" + def);
543 | setInterval(checkForUrlChange, 50);
544 | }
545 | try {
546 | func();
547 | } catch(e) {
548 | window.setTimeout(function() { func(); }, 0);
549 | }
550 | }
551 |
552 | if (browser.safari)
553 | {
554 | currentHistoryLength = history.length;
555 | if (historyHash.length == 0) {
556 | historyHash[currentHistoryLength] = def;
557 | var newloc = "#" + def;
558 | window.location.replace(newloc);
559 | } else {
560 | //alert(historyHash[historyHash.length-1]);
561 | }
562 | setInterval(checkForUrlChange, 50);
563 | }
564 |
565 |
566 | if (browser.firefox || browser.opera)
567 | {
568 | var reg = new RegExp("#" + def + "$");
569 | if (window.location.toString().match(reg)) {
570 | } else {
571 | var newloc ="#" + def;
572 | window.location.replace(newloc);
573 | }
574 | setInterval(checkForUrlChange, 50);
575 | }
576 |
577 | },
578 |
579 | /* Set the current browser URL; called from inside BrowserManager to propagate
580 | * the application state out to the container.
581 | */
582 | setBrowserURL: function(flexAppUrl, objectId) {
583 | if (browser.ie && typeof objectId != "undefined") {
584 | currentObjectId = objectId;
585 | }
586 | //fromIframe = fromIframe || false;
587 | //fromFlex = fromFlex || false;
588 | //alert("setBrowserURL: " + flexAppUrl);
589 | //flexAppUrl = (flexAppUrl == "") ? defaultHash : flexAppUrl ;
590 |
591 | var pos = document.location.href.indexOf('#');
592 | var baseUrl = pos != -1 ? document.location.href.substr(0, pos) : document.location.href;
593 | var newUrl = baseUrl + '#' + flexAppUrl;
594 |
595 | if (document.location.href != newUrl && document.location.href + '#' != newUrl) {
596 | currentHref = newUrl;
597 | addHistoryEntry(baseUrl, newUrl, flexAppUrl);
598 | currentHistoryLength = history.length;
599 | }
600 | },
601 |
602 | browserURLChange: function(flexAppUrl) {
603 | var objectId = null;
604 | if (browser.ie && currentObjectId != null) {
605 | objectId = currentObjectId;
606 | }
607 |
608 | if (typeof BrowserHistory_multiple != "undefined" && BrowserHistory_multiple == true) {
609 | var pl = getPlayers();
610 | for (var i = 0; i < pl.length; i++) {
611 | try {
612 | pl[i].browserURLChange(flexAppUrl);
613 | } catch(e) { }
614 | }
615 | } else {
616 | try {
617 | getPlayer(objectId).browserURLChange(flexAppUrl);
618 | } catch(e) { }
619 | }
620 |
621 | currentObjectId = null;
622 | },
623 | getUserAgent: function() {
624 | return navigator.userAgent;
625 | },
626 | getPlatform: function() {
627 | return navigator.platform;
628 | }
629 |
630 | }
631 |
632 | })();
633 |
634 | // Initialization
635 |
636 | // Automated unit testing and other diagnostics
637 |
638 | function setURL(url)
639 | {
640 | document.location.href = url;
641 | }
642 |
643 | function backButton()
644 | {
645 | history.back();
646 | }
647 |
648 | function forwardButton()
649 | {
650 | history.forward();
651 | }
652 |
653 | function goForwardOrBackInHistory(step)
654 | {
655 | history.go(step);
656 | }
657 |
658 | //BrowserHistoryUtils.addEvent(window, "load", function() { BrowserHistory.initialize(); });
659 | (function(i) {
660 | var u =navigator.userAgent;var e=/*@cc_on!@*/false;
661 | var st = setTimeout;
662 | if(/webkit/i.test(u)){
663 | st(function(){
664 | var dr=document.readyState;
665 | if(dr=="loaded"||dr=="complete"){i()}
666 | else{st(arguments.callee,10);}},10);
667 | } else if((/mozilla/i.test(u)&&!/(compati)/.test(u)) || (/opera/i.test(u))){
668 | document.addEventListener("DOMContentLoaded",i,false);
669 | } else if(e){
670 | (function(){
671 | var t=document.createElement('doc:rdy');
672 | try{t.doScroll('left');
673 | i();t=null;
674 | }catch(e){st(arguments.callee,0);}})();
675 | } else{
676 | window.onload=i;
677 | }
678 | })( function() {BrowserHistory.initialize();} );
679 |
--------------------------------------------------------------------------------
/csrf/bin-debug/history/historyFrame.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
27 | Hidden frame for Browser History support.
28 |
29 |
30 |
--------------------------------------------------------------------------------
/csrf/bin-debug/mx_4.6.0.23201.swf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/TheRook/CSRF-Request-Builder/177fe51378cf6ca7b10bd04a42a2c791ffd17012/csrf/bin-debug/mx_4.6.0.23201.swf
--------------------------------------------------------------------------------
/csrf/bin-debug/playerProductInstall.swf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/TheRook/CSRF-Request-Builder/177fe51378cf6ca7b10bd04a42a2c791ffd17012/csrf/bin-debug/playerProductInstall.swf
--------------------------------------------------------------------------------
/csrf/bin-debug/spark_4.6.0.23201.swf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/TheRook/CSRF-Request-Builder/177fe51378cf6ca7b10bd04a42a2c791ffd17012/csrf/bin-debug/spark_4.6.0.23201.swf
--------------------------------------------------------------------------------
/csrf/bin-debug/sparkskins_4.6.0.23201.swf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/TheRook/CSRF-Request-Builder/177fe51378cf6ca7b10bd04a42a2c791ffd17012/csrf/bin-debug/sparkskins_4.6.0.23201.swf
--------------------------------------------------------------------------------
/csrf/bin-debug/swfobject.js:
--------------------------------------------------------------------------------
1 | /*! SWFObject v2.2
68 |
78 |
79 | 69 | To view this page ensure that Adobe Flash Player version 70 | 11.1.0 or greater is installed. 71 |
72 | 77 |
107 |
108 |
109 |
--------------------------------------------------------------------------------
/csrf/bin-release/csrf.swf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/TheRook/CSRF-Request-Builder/177fe51378cf6ca7b10bd04a42a2c791ffd17012/csrf/bin-release/csrf.swf
--------------------------------------------------------------------------------
/csrf/bin-release/history/history.css:
--------------------------------------------------------------------------------
1 | /* This CSS stylesheet defines styles used by required elements in a flex application page that supports browser history */
2 |
3 | #ie_historyFrame { width: 0px; height: 0px; display:none }
4 | #firefox_anchorDiv { width: 0px; height: 0px; display:none }
5 | #safari_formDiv { width: 0px; height: 0px; display:none }
6 | #safari_rememberDiv { width: 0px; height: 0px; display:none }
7 |
--------------------------------------------------------------------------------
/csrf/bin-release/history/history.js:
--------------------------------------------------------------------------------
1 | BrowserHistoryUtils = {
2 | addEvent: function(elm, evType, fn, useCapture) {
3 | useCapture = useCapture || false;
4 | if (elm.addEventListener) {
5 | elm.addEventListener(evType, fn, useCapture);
6 | return true;
7 | }
8 | else if (elm.attachEvent) {
9 | var r = elm.attachEvent('on' + evType, fn);
10 | return r;
11 | }
12 | else {
13 | elm['on' + evType] = fn;
14 | }
15 | }
16 | }
17 |
18 | BrowserHistory = (function() {
19 | // type of browser
20 | var browser = {
21 | ie: false,
22 | ie8: false,
23 | firefox: false,
24 | safari: false,
25 | opera: false,
26 | version: -1
27 | };
28 |
29 | // Default app state URL to use when no fragment ID present
30 | var defaultHash = '';
31 |
32 | // Last-known app state URL
33 | var currentHref = document.location.href;
34 |
35 | // Initial URL (used only by IE)
36 | var initialHref = document.location.href;
37 |
38 | // Initial URL (used only by IE)
39 | var initialHash = document.location.hash;
40 |
41 | // History frame source URL prefix (used only by IE)
42 | var historyFrameSourcePrefix = 'history/historyFrame.html?';
43 |
44 | // History maintenance (used only by Safari)
45 | var currentHistoryLength = -1;
46 |
47 | // Flag to denote the existence of onhashchange
48 | var browserHasHashChange = false;
49 |
50 | var historyHash = [];
51 |
52 | var initialState = createState(initialHref, initialHref + '#' + initialHash, initialHash);
53 |
54 | var backStack = [];
55 | var forwardStack = [];
56 |
57 | var currentObjectId = null;
58 |
59 | //UserAgent detection
60 | var useragent = navigator.userAgent.toLowerCase();
61 |
62 | if (useragent.indexOf("opera") != -1) {
63 | browser.opera = true;
64 | } else if (useragent.indexOf("msie") != -1) {
65 | browser.ie = true;
66 | browser.version = parseFloat(useragent.substring(useragent.indexOf('msie') + 4));
67 | if (browser.version == 8)
68 | {
69 | browser.ie = false;
70 | browser.ie8 = true;
71 | }
72 | } else if (useragent.indexOf("safari") != -1) {
73 | browser.safari = true;
74 | browser.version = parseFloat(useragent.substring(useragent.indexOf('safari') + 7));
75 | } else if (useragent.indexOf("gecko") != -1) {
76 | browser.firefox = true;
77 | }
78 |
79 | if (browser.ie == true && browser.version == 7) {
80 | window["_ie_firstload"] = false;
81 | }
82 |
83 | function hashChangeHandler()
84 | {
85 | currentHref = document.location.href;
86 | var flexAppUrl = getHash();
87 | //ADR: to fix multiple
88 | if (typeof BrowserHistory_multiple != "undefined" && BrowserHistory_multiple == true) {
89 | var pl = getPlayers();
90 | for (var i = 0; i < pl.length; i++) {
91 | pl[i].browserURLChange(flexAppUrl);
92 | }
93 | } else {
94 | getPlayer().browserURLChange(flexAppUrl);
95 | }
96 | }
97 |
98 | // Accessor functions for obtaining specific elements of the page.
99 | function getHistoryFrame()
100 | {
101 | return document.getElementById('ie_historyFrame');
102 | }
103 |
104 | function getFormElement()
105 | {
106 | return document.getElementById('safari_formDiv');
107 | }
108 |
109 | function getRememberElement()
110 | {
111 | return document.getElementById("safari_remember_field");
112 | }
113 |
114 | // Get the Flash player object for performing ExternalInterface callbacks.
115 | // Updated for changes to SWFObject2.
116 | function getPlayer(id) {
117 | var i;
118 |
119 | if (id && document.getElementById(id)) {
120 | var r = document.getElementById(id);
121 | if (typeof r.SetVariable != "undefined") {
122 | return r;
123 | }
124 | else {
125 | var o = r.getElementsByTagName("object");
126 | var e = r.getElementsByTagName("embed");
127 | for (i = 0; i < o.length; i++) {
128 | if (typeof o[i].browserURLChange != "undefined")
129 | return o[i];
130 | }
131 | for (i = 0; i < e.length; i++) {
132 | if (typeof e[i].browserURLChange != "undefined")
133 | return e[i];
134 | }
135 | }
136 | }
137 | else {
138 | var o = document.getElementsByTagName("object");
139 | var e = document.getElementsByTagName("embed");
140 | for (i = 0; i < e.length; i++) {
141 | if (typeof e[i].browserURLChange != "undefined")
142 | {
143 | return e[i];
144 | }
145 | }
146 | for (i = 0; i < o.length; i++) {
147 | if (typeof o[i].browserURLChange != "undefined")
148 | {
149 | return o[i];
150 | }
151 | }
152 | }
153 | return undefined;
154 | }
155 |
156 | function getPlayers() {
157 | var i;
158 | var players = [];
159 | if (players.length == 0) {
160 | var tmp = document.getElementsByTagName('object');
161 | for (i = 0; i < tmp.length; i++)
162 | {
163 | if (typeof tmp[i].browserURLChange != "undefined")
164 | players.push(tmp[i]);
165 | }
166 | }
167 | if (players.length == 0 || players[0].object == null) {
168 | var tmp = document.getElementsByTagName('embed');
169 | for (i = 0; i < tmp.length; i++)
170 | {
171 | if (typeof tmp[i].browserURLChange != "undefined")
172 | players.push(tmp[i]);
173 | }
174 | }
175 | return players;
176 | }
177 |
178 | function getIframeHash() {
179 | var doc = getHistoryFrame().contentWindow.document;
180 | var hash = String(doc.location.search);
181 | if (hash.length == 1 && hash.charAt(0) == "?") {
182 | hash = "";
183 | }
184 | else if (hash.length >= 2 && hash.charAt(0) == "?") {
185 | hash = hash.substring(1);
186 | }
187 | return hash;
188 | }
189 |
190 | /* Get the current location hash excluding the '#' symbol. */
191 | function getHash() {
192 | // It would be nice if we could use document.location.hash here,
193 | // but it's faulty sometimes.
194 | var idx = document.location.href.indexOf('#');
195 | return (idx >= 0) ? document.location.href.substr(idx+1) : '';
196 | }
197 |
198 | /* Get the current location hash excluding the '#' symbol. */
199 | function setHash(hash) {
200 | // It would be nice if we could use document.location.hash here,
201 | // but it's faulty sometimes.
202 | if (hash == '') hash = '#'
203 | document.location.hash = hash;
204 | }
205 |
206 | function createState(baseUrl, newUrl, flexAppUrl) {
207 | return { 'baseUrl': baseUrl, 'newUrl': newUrl, 'flexAppUrl': flexAppUrl, 'title': null };
208 | }
209 |
210 | /* Add a history entry to the browser.
211 | * baseUrl: the portion of the location prior to the '#'
212 | * newUrl: the entire new URL, including '#' and following fragment
213 | * flexAppUrl: the portion of the location following the '#' only
214 | */
215 | function addHistoryEntry(baseUrl, newUrl, flexAppUrl) {
216 |
217 | //delete all the history entries
218 | forwardStack = [];
219 |
220 | if (browser.ie) {
221 | //Check to see if we are being asked to do a navigate for the first
222 | //history entry, and if so ignore, because it's coming from the creation
223 | //of the history iframe
224 | if (flexAppUrl == defaultHash && document.location.href == initialHref && window['_ie_firstload']) {
225 | currentHref = initialHref;
226 | return;
227 | }
228 | if ((!flexAppUrl || flexAppUrl == defaultHash) && window['_ie_firstload']) {
229 | newUrl = baseUrl + '#' + defaultHash;
230 | flexAppUrl = defaultHash;
231 | } else {
232 | // for IE, tell the history frame to go somewhere without a '#'
233 | // in order to get this entry into the browser history.
234 | getHistoryFrame().src = historyFrameSourcePrefix + flexAppUrl;
235 | }
236 | setHash(flexAppUrl);
237 | } else {
238 |
239 | //ADR
240 | if (backStack.length == 0 && initialState.flexAppUrl == flexAppUrl) {
241 | initialState = createState(baseUrl, newUrl, flexAppUrl);
242 | } else if(backStack.length > 0 && backStack[backStack.length - 1].flexAppUrl == flexAppUrl) {
243 | backStack[backStack.length - 1] = createState(baseUrl, newUrl, flexAppUrl);
244 | }
245 |
246 | if (browser.safari && !browserHasHashChange) {
247 | // for Safari, submit a form whose action points to the desired URL
248 | if (browser.version <= 419.3) {
249 | var file = window.location.pathname.toString();
250 | file = file.substring(file.lastIndexOf("/")+1);
251 | getFormElement().innerHTML = '';
252 | //get the current elements and add them to the form
253 | var qs = window.location.search.substring(1);
254 | var qs_arr = qs.split("&");
255 | for (var i = 0; i < qs_arr.length; i++) {
256 | var tmp = qs_arr[i].split("=");
257 | var elem = document.createElement("input");
258 | elem.type = "hidden";
259 | elem.name = tmp[0];
260 | elem.value = tmp[1];
261 | document.forms.historyForm.appendChild(elem);
262 | }
263 | document.forms.historyForm.submit();
264 | } else {
265 | top.location.hash = flexAppUrl;
266 | }
267 | // We also have to maintain the history by hand for Safari
268 | historyHash[history.length] = flexAppUrl;
269 | _storeStates();
270 | } else {
271 | // Otherwise, just tell the browser to go there
272 | setHash(flexAppUrl);
273 | }
274 | }
275 | backStack.push(createState(baseUrl, newUrl, flexAppUrl));
276 | }
277 |
278 | function _storeStates() {
279 | if (browser.safari) {
280 | getRememberElement().value = historyHash.join(",");
281 | }
282 | }
283 |
284 | function handleBackButton() {
285 | //The "current" page is always at the top of the history stack.
286 | var current = backStack.pop();
287 | if (!current) { return; }
288 | var last = backStack[backStack.length - 1];
289 | if (!last && backStack.length == 0){
290 | last = initialState;
291 | }
292 | forwardStack.push(current);
293 | }
294 |
295 | function handleForwardButton() {
296 | //summary: private method. Do not call this directly.
297 |
298 | var last = forwardStack.pop();
299 | if (!last) { return; }
300 | backStack.push(last);
301 | }
302 |
303 | function handleArbitraryUrl() {
304 | //delete all the history entries
305 | forwardStack = [];
306 | }
307 |
308 | /* Called periodically to poll to see if we need to detect navigation that has occurred */
309 | function checkForUrlChange() {
310 |
311 | if (browser.ie) {
312 | if (currentHref != document.location.href && currentHref + '#' != document.location.href) {
313 | //This occurs when the user has navigated to a specific URL
314 | //within the app, and didn't use browser back/forward
315 | //IE seems to have a bug where it stops updating the URL it
316 | //shows the end-user at this point, but programatically it
317 | //appears to be correct. Do a full app reload to get around
318 | //this issue.
319 | if (browser.version < 7) {
320 | currentHref = document.location.href;
321 | document.location.reload();
322 | } else {
323 | if (getHash() != getIframeHash()) {
324 | // this.iframe.src = this.blankURL + hash;
325 | var sourceToSet = historyFrameSourcePrefix + getHash();
326 | getHistoryFrame().src = sourceToSet;
327 | currentHref = document.location.href;
328 | }
329 | }
330 | }
331 | }
332 |
333 | if (browser.safari && !browserHasHashChange) {
334 | // For Safari, we have to check to see if history.length changed.
335 | if (currentHistoryLength >= 0 && history.length != currentHistoryLength) {
336 | //alert("did change: " + history.length + ", " + historyHash.length + "|" + historyHash[history.length] + "|>" + historyHash.join("|"));
337 | var flexAppUrl = getHash();
338 | if (browser.version < 528.16 /* Anything earlier than Safari 4.0 */)
339 | {
340 | // If it did change and we're running Safari 3.x or earlier,
341 | // then we have to look the old state up in our hand-maintained
342 | // array since document.location.hash won't have changed,
343 | // then call back into BrowserManager.
344 | currentHistoryLength = history.length;
345 | flexAppUrl = historyHash[currentHistoryLength];
346 | }
347 |
348 | //ADR: to fix multiple
349 | if (typeof BrowserHistory_multiple != "undefined" && BrowserHistory_multiple == true) {
350 | var pl = getPlayers();
351 | for (var i = 0; i < pl.length; i++) {
352 | pl[i].browserURLChange(flexAppUrl);
353 | }
354 | } else {
355 | getPlayer().browserURLChange(flexAppUrl);
356 | }
357 | _storeStates();
358 | }
359 | }
360 | if (browser.firefox && !browserHasHashChange) {
361 | if (currentHref != document.location.href) {
362 | var bsl = backStack.length;
363 |
364 | var urlActions = {
365 | back: false,
366 | forward: false,
367 | set: false
368 | }
369 |
370 | if ((window.location.hash == initialHash || window.location.href == initialHref) && (bsl == 1)) {
371 | urlActions.back = true;
372 | // FIXME: could this ever be a forward button?
373 | // we can't clear it because we still need to check for forwards. Ugg.
374 | // clearInterval(this.locationTimer);
375 | handleBackButton();
376 | }
377 |
378 | // first check to see if we could have gone forward. We always halt on
379 | // a no-hash item.
380 | if (forwardStack.length > 0) {
381 | if (forwardStack[forwardStack.length-1].flexAppUrl == getHash()) {
382 | urlActions.forward = true;
383 | handleForwardButton();
384 | }
385 | }
386 |
387 | // ok, that didn't work, try someplace back in the history stack
388 | if ((bsl >= 2) && (backStack[bsl - 2])) {
389 | if (backStack[bsl - 2].flexAppUrl == getHash()) {
390 | urlActions.back = true;
391 | handleBackButton();
392 | }
393 | }
394 |
395 | if (!urlActions.back && !urlActions.forward) {
396 | var foundInStacks = {
397 | back: -1,
398 | forward: -1
399 | }
400 |
401 | for (var i = 0; i < backStack.length; i++) {
402 | if (backStack[i].flexAppUrl == getHash() && i != (bsl - 2)) {
403 | arbitraryUrl = true;
404 | foundInStacks.back = i;
405 | }
406 | }
407 | for (var i = 0; i < forwardStack.length; i++) {
408 | if (forwardStack[i].flexAppUrl == getHash() && i != (bsl - 2)) {
409 | arbitraryUrl = true;
410 | foundInStacks.forward = i;
411 | }
412 | }
413 | handleArbitraryUrl();
414 | }
415 |
416 | // Firefox changed; do a callback into BrowserManager to tell it.
417 | currentHref = document.location.href;
418 | var flexAppUrl = getHash();
419 | //ADR: to fix multiple
420 | if (typeof BrowserHistory_multiple != "undefined" && BrowserHistory_multiple == true) {
421 | var pl = getPlayers();
422 | for (var i = 0; i < pl.length; i++) {
423 | pl[i].browserURLChange(flexAppUrl);
424 | }
425 | } else {
426 | getPlayer().browserURLChange(flexAppUrl);
427 | }
428 | }
429 | }
430 | }
431 |
432 | var _initialize = function () {
433 |
434 | browserHasHashChange = ("onhashchange" in document.body);
435 |
436 | if (browser.ie)
437 | {
438 | var scripts = document.getElementsByTagName('script');
439 | for (var i = 0, s; s = scripts[i]; i++) {
440 | if (s.src.indexOf("history.js") > -1) {
441 | var iframe_location = (new String(s.src)).replace("history.js", "historyFrame.html");
442 | }
443 | }
444 | historyFrameSourcePrefix = iframe_location + "?";
445 | var src = historyFrameSourcePrefix;
446 |
447 | var iframe = document.createElement("iframe");
448 | iframe.id = 'ie_historyFrame';
449 | iframe.name = 'ie_historyFrame';
450 | iframe.src = 'javascript:false;';
451 |
452 | try {
453 | document.body.appendChild(iframe);
454 | } catch(e) {
455 | setTimeout(function() {
456 | document.body.appendChild(iframe);
457 | }, 0);
458 | }
459 | }
460 |
461 | if (browser.safari && !browserHasHashChange)
462 | {
463 | var rememberDiv = document.createElement("div");
464 | rememberDiv.id = 'safari_rememberDiv';
465 | document.body.appendChild(rememberDiv);
466 | rememberDiv.innerHTML = '';
467 |
468 | var formDiv = document.createElement("div");
469 | formDiv.id = 'safari_formDiv';
470 | document.body.appendChild(formDiv);
471 |
472 | var reloader_content = document.createElement('div');
473 | reloader_content.id = 'safarireloader';
474 | var scripts = document.getElementsByTagName('script');
475 | for (var i = 0, s; s = scripts[i]; i++) {
476 | if (s.src.indexOf("history.js") > -1) {
477 | html = (new String(s.src)).replace(".js", ".html");
478 | }
479 | }
480 | reloader_content.innerHTML = '';
481 | document.body.appendChild(reloader_content);
482 | reloader_content.style.position = 'absolute';
483 | reloader_content.style.left = reloader_content.style.top = '-9999px';
484 | iframe = reloader_content.getElementsByTagName('iframe')[0];
485 |
486 | if (document.getElementById("safari_remember_field").value != "" ) {
487 | historyHash = document.getElementById("safari_remember_field").value.split(",");
488 | }
489 | }
490 |
491 | if (browserHasHashChange)
492 | document.body.onhashchange = hashChangeHandler;
493 | }
494 |
495 | return {
496 | historyHash: historyHash,
497 | backStack: function() { return backStack; },
498 | forwardStack: function() { return forwardStack },
499 | getPlayer: getPlayer,
500 | initialize: function(src) {
501 | _initialize(src);
502 | },
503 | setURL: function(url) {
504 | document.location.href = url;
505 | },
506 | getURL: function() {
507 | return document.location.href;
508 | },
509 | getTitle: function() {
510 | return document.title;
511 | },
512 | setTitle: function(title) {
513 | try {
514 | backStack[backStack.length - 1].title = title;
515 | } catch(e) { }
516 | //if on safari, set the title to be the empty string.
517 | if (browser.safari) {
518 | if (title == "") {
519 | try {
520 | var tmp = window.location.href.toString();
521 | title = tmp.substring((tmp.lastIndexOf("/")+1), tmp.lastIndexOf("#"));
522 | } catch(e) {
523 | title = "";
524 | }
525 | }
526 | }
527 | document.title = title;
528 | },
529 | setDefaultURL: function(def)
530 | {
531 | defaultHash = def;
532 | def = getHash();
533 | //trailing ? is important else an extra frame gets added to the history
534 | //when navigating back to the first page. Alternatively could check
535 | //in history frame navigation to compare # and ?.
536 | if (browser.ie)
537 | {
538 | window['_ie_firstload'] = true;
539 | var sourceToSet = historyFrameSourcePrefix + def;
540 | var func = function() {
541 | getHistoryFrame().src = sourceToSet;
542 | window.location.replace("#" + def);
543 | setInterval(checkForUrlChange, 50);
544 | }
545 | try {
546 | func();
547 | } catch(e) {
548 | window.setTimeout(function() { func(); }, 0);
549 | }
550 | }
551 |
552 | if (browser.safari)
553 | {
554 | currentHistoryLength = history.length;
555 | if (historyHash.length == 0) {
556 | historyHash[currentHistoryLength] = def;
557 | var newloc = "#" + def;
558 | window.location.replace(newloc);
559 | } else {
560 | //alert(historyHash[historyHash.length-1]);
561 | }
562 | setInterval(checkForUrlChange, 50);
563 | }
564 |
565 |
566 | if (browser.firefox || browser.opera)
567 | {
568 | var reg = new RegExp("#" + def + "$");
569 | if (window.location.toString().match(reg)) {
570 | } else {
571 | var newloc ="#" + def;
572 | window.location.replace(newloc);
573 | }
574 | setInterval(checkForUrlChange, 50);
575 | }
576 |
577 | },
578 |
579 | /* Set the current browser URL; called from inside BrowserManager to propagate
580 | * the application state out to the container.
581 | */
582 | setBrowserURL: function(flexAppUrl, objectId) {
583 | if (browser.ie && typeof objectId != "undefined") {
584 | currentObjectId = objectId;
585 | }
586 | //fromIframe = fromIframe || false;
587 | //fromFlex = fromFlex || false;
588 | //alert("setBrowserURL: " + flexAppUrl);
589 | //flexAppUrl = (flexAppUrl == "") ? defaultHash : flexAppUrl ;
590 |
591 | var pos = document.location.href.indexOf('#');
592 | var baseUrl = pos != -1 ? document.location.href.substr(0, pos) : document.location.href;
593 | var newUrl = baseUrl + '#' + flexAppUrl;
594 |
595 | if (document.location.href != newUrl && document.location.href + '#' != newUrl) {
596 | currentHref = newUrl;
597 | addHistoryEntry(baseUrl, newUrl, flexAppUrl);
598 | currentHistoryLength = history.length;
599 | }
600 | },
601 |
602 | browserURLChange: function(flexAppUrl) {
603 | var objectId = null;
604 | if (browser.ie && currentObjectId != null) {
605 | objectId = currentObjectId;
606 | }
607 |
608 | if (typeof BrowserHistory_multiple != "undefined" && BrowserHistory_multiple == true) {
609 | var pl = getPlayers();
610 | for (var i = 0; i < pl.length; i++) {
611 | try {
612 | pl[i].browserURLChange(flexAppUrl);
613 | } catch(e) { }
614 | }
615 | } else {
616 | try {
617 | getPlayer(objectId).browserURLChange(flexAppUrl);
618 | } catch(e) { }
619 | }
620 |
621 | currentObjectId = null;
622 | },
623 | getUserAgent: function() {
624 | return navigator.userAgent;
625 | },
626 | getPlatform: function() {
627 | return navigator.platform;
628 | }
629 |
630 | }
631 |
632 | })();
633 |
634 | // Initialization
635 |
636 | // Automated unit testing and other diagnostics
637 |
638 | function setURL(url)
639 | {
640 | document.location.href = url;
641 | }
642 |
643 | function backButton()
644 | {
645 | history.back();
646 | }
647 |
648 | function forwardButton()
649 | {
650 | history.forward();
651 | }
652 |
653 | function goForwardOrBackInHistory(step)
654 | {
655 | history.go(step);
656 | }
657 |
658 | //BrowserHistoryUtils.addEvent(window, "load", function() { BrowserHistory.initialize(); });
659 | (function(i) {
660 | var u =navigator.userAgent;var e=/*@cc_on!@*/false;
661 | var st = setTimeout;
662 | if(/webkit/i.test(u)){
663 | st(function(){
664 | var dr=document.readyState;
665 | if(dr=="loaded"||dr=="complete"){i()}
666 | else{st(arguments.callee,10);}},10);
667 | } else if((/mozilla/i.test(u)&&!/(compati)/.test(u)) || (/opera/i.test(u))){
668 | document.addEventListener("DOMContentLoaded",i,false);
669 | } else if(e){
670 | (function(){
671 | var t=document.createElement('doc:rdy');
672 | try{t.doScroll('left');
673 | i();t=null;
674 | }catch(e){st(arguments.callee,0);}})();
675 | } else{
676 | window.onload=i;
677 | }
678 | })( function() {BrowserHistory.initialize();} );
679 |
--------------------------------------------------------------------------------
/csrf/bin-release/history/historyFrame.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
27 | Hidden frame for Browser History support.
28 |
29 |
30 |
--------------------------------------------------------------------------------
/csrf/bin-release/playerProductInstall.swf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/TheRook/CSRF-Request-Builder/177fe51378cf6ca7b10bd04a42a2c791ffd17012/csrf/bin-release/playerProductInstall.swf
--------------------------------------------------------------------------------
/csrf/bin-release/swfobject.js:
--------------------------------------------------------------------------------
1 | /*! SWFObject v2.2
68 |
78 |
79 | 69 | To view this page ensure that Adobe Flash Player version 70 | ${version_major}.${version_minor}.${version_revision} or greater is installed. 71 |
72 | 77 |
107 |
108 |
109 |
--------------------------------------------------------------------------------
/csrf/html-template/playerProductInstall.swf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/TheRook/CSRF-Request-Builder/177fe51378cf6ca7b10bd04a42a2c791ffd17012/csrf/html-template/playerProductInstall.swf
--------------------------------------------------------------------------------
/csrf/html-template/swfobject.js:
--------------------------------------------------------------------------------
1 | /*! SWFObject v2.2
812 |
822 |
823 |
824 |
--------------------------------------------------------------------------------
813 | To view this page ensure that Adobe Flash Player version 814 | 11.1.0 or greater is installed. 815 |
816 | 821 |