Reply to thread

Message

<blockquote data-quote="SeriousHoax" data-source="post: 1124047" data-attributes="member: 78686">I don&#039;t think any extension can properly do what you&#039;re asking. Keep in mind all they do is, check it against a blacklist. For a third-party script if we assume it&#039;s loaded from malware(.)com/harmful.js then either the AV vendor&#039;s database need to have malware(.)com in their blacklist or the source directly malware(.)com/harmful.js.For scanning a malicious script in real-time you are going to need an AV scanner which doesn&#039;t come with an extension.Sometimes a wesbite can get compromised where loading a script from a third-party source might not be necessary and in that case, the main site&#039;s html will include the malicious javascript which 9/10 times will be obfuscated. So you would need an AV with HTTPS scanner function like Avast, Bitdefender, ESET, Kaspersky and they will have to emulate the script in their engine to know what is the purpose of this script and if they have signatures for it, only then they will get detected.So without an active AV with such capabilites, it&#039;s not easy to detect such malicious script.</blockquote>

[QUOTE="SeriousHoax, post: 1124047, member: 78686"] I don't think any extension can properly do what you're asking. Keep in mind all they do is, check it against a blacklist. For a third-party script if we assume it's loaded from malware(.)com/harmful.js then either the AV vendor's database need to have malware(.)com in their blacklist or the source directly malware(.)com/harmful.js. For scanning a malicious script in real-time you are going to need an AV scanner which doesn't come with an extension. Sometimes a wesbite can get compromised where loading a script from a third-party source might not be necessary and in that case, the main site's html will include the malicious javascript which 9/10 times will be obfuscated. So you would need an AV with HTTPS scanner function like Avast, Bitdefender, ESET, Kaspersky and they will have to emulate the script in their engine to know what is the purpose of this script and if they have signatures for it, only then they will get detected. So without an active AV with such capabilites, it's not easy to detect such malicious script. [/QUOTE]

Verification