Anatomy of a malicious script: how a website can take over your browser
What can a site do to you, or to your device, without your explicit consent? What happens when you visit a slightly “improper” site, or a “proper” site you visited includes some third-party script that hasn’t been thoroughly checked? Has it ever happened to you that your browser gets hijacked and innumerable pop-ups come up, and you seem to be unable to close them without quitting the browser altogether, or clicking 25 times on the “Back” button? This article looks at what happens under the hood of a script that does exactly that.
Read full article: Anatomy of a malicious script: how a website can take over your browser | CSS-Tricks
