[Htmlunit-user] Html Unit Vulnerable due to javascript

[Ahmed A. <asa...@ya...>]

Hi,

- You must subscribe to the list before posting
- JavaScript is different than Java as you know.  Java will be executed if your explicitly allow Applets to run.
- JavaScript can execute ActiveXObjects, the control of which is outside Java, again you need to explicitly trust the website.
- I don't think there is a general API for JavaScript to get access to Database/Java heap information, but you could quickly check if you can do that in real browser.

Ahmed

________________________________
 From: "htm...@li..." <htm...@li...>
Sent: Monday, September 8, 2014 8:18 AM
Subject: Auto-discard notification
 


The attached message has been automatically discarded.
Hi, 

My query is when we execute the javascript files in the headless browser of htmlUnit.
If the JS files have some vulnerabilities , what will be the impact on the machine on which we are running the test cases.

1.with javascript executed inside html unit,will be able to connect to any database that the test cases are using
2. with javascript executed inside html unit, will be  be able to get the Java heap information-- 
Thanks & Regards,
Priyavrath.Dakua