Last Updated: February 25, 2016
·
999
· metaraine

Beware Broken Bookmarklets

Several popular bookmarklet generators (including this one) fail to url encode the modulus operator (%), so the following trivial script:

alert(1 % 10);

Incorrectly generates:

javascript:(function(){alert(1%10);})();

Instead of:

javascript:(function(){alert(1%2510);})();

Use one of these bookmarklet generators that work!

Have a fresh tip? Share with Coderwall community!

Post
Post a tip
Did you know?

JavaScript on a page runs with the privileges of that origin. One altered library, tag manager, or snippet can read inputs, change what people see, and call your APIs as the user.

Security insights from Cside