Prepare!

!!! PLEASE REFRAIN FROM VISITING CINGULARONE.COM !!!

Alright, I have (and many others) given fair warning to AT&T, but the issue has not been addressed. Time to shed some light on the fact that AT&T's CingularOne.com website has been hijacked, and is currently hosting a JavaScript exploit that loads content from remote malicious domains.

Here's some visual proof:

Again, please refrain from visiting AT&T's CingularOne.com website until this issue has been fixed.

However, if you just must sneak a peek, then disabling JavaScript and inline frames should mitigate any infection vectors. But to be safe, ensure your anti-virus on-access scanning is enabled, and your AV definitions are updated.

I was recently involved in our corporate overhaul of our proxy automatic config (.pac) file. Below are some tips if you ever have to do the same. Since some older clients or custom apps may have poor JavaScript support, or may be considered non-standard, thus:

* Always check url and host parameters prior to using them.
* Validate all built-in JS functions exist prior to calling them.
* Keep the .pac file size as small as possible, to improve download speed.
* Keep comments to a minimum, per above.
* Since "return" is immediate, avoid using "else" for "if" statements, per above.
* Single-line if() statements do not require begin { and end } brackets, per above.
* Avoid calling isResolvable(), dnsResolve(), and isInNet() functions, due to DNS performance issues.
* Check simple rule exceptions first.
* Place high-probability checks early-on and nearest top.
* Avoid using any external or global vars/functions.
* Since .pac files are text and can be downloaded/viewed by anyone, avoid revealing secrets.
* For security reasons, avoid referencing clients by IP addresses.
* Use efficient regular expressions, and avoid capturing matches if you don't reference them later on.
* To avoid typos, only declare unique return strings once (near top for easy maintenance).
* When possible, sort lists of IP addresses and/or domains to ease future maintenance efforts.
* Try to group common return values into single conditional if() checks.
* For single proxy server environments, return the proxy's static IP address to bypass DNS lookup overhead.
* Ensure your text file encoding is proper for your hosting server environment.
* If checking IPs or domains, avoid protocol-specific string comparisons against the url parameter.
* Randomized proxy load-balancing via pac files is not recommended.
* Keep in mind that server access is either proxied or not. Thus, checking ports and protocols is typically not required.
* Be sure to check all conditions and exceptions listed in your .pac file prior to deployment.
* Obviously, ensure your JavaScript is error-free prior to deployment.

Hope this helps. Enjoy.

Ever wish Opera's mouse cursor behaved like Firefox's or MSIE's in web pages? You know, when you hover over text in a web page, the cursor actually changes to a meaningful text caret, rather than remaining a stupid old default NW mouse cursor.

Usability experts say that text carets (vertical mouse cursor) should be used as a visual feedback mechanism when underlying text can be selected. Plus, text carets do not obscure underlying text, like the default NW mouse cursor does. Personally, this is just one Opera pet peeve solved with User JavaScript.

So, with my latest UserJS script (shown below), now you too can have this 'smart' mouse cursor feature in Opera!

Keep in mind, this script is currently non-optimized for extremely large pages, or pages with poorly written HTML markup and/or scripts. Regardless, it does seem to work pretty well on most sites.

Download/view the textNodes.js script

document.addEventListener("load",
   function() {

      var body = document.getElementsByTagName("BODY");
      if (!body) return;

      var isIgnored = function(node) {
         var bad = /^(SCRIPT)|(STYLE)|(OPTION)|(TEXTAREA)|(INPUT)|(\#cdata\-section)|(\#comment)$/i;
         var result = false;
         while (node && !result) {
            result = (node.nodeName.match(bad) || 
                     ((node.nodeName == "A") && node.href));
            node = node.parentNode;
         }
         return result;
      }

      var nodeIterator = document.createNodeIterator( 
         body[0], 
         NodeFilter.SHOW_TEXT, 
         { acceptNode : function (node) {
            return (/\S+/.test(node.data) && !isIgnored(node)) ?
               NodeFilter.FILTER_ACCEPT:
               NodeFilter.FILTER_REJECT;
           }
         }, 
         true
      );

      var a = new Array();
      var textNode;
      while ((textNode = nodeIterator.nextNode())) { 
         if (!textNode.parentNode.style) continue;
         if (textNode.parentNode.style.cursor != "") continue;
         if (textNode.parentNode.currentStyle.cursor != "default") continue;
         a.push(textNode);
      }

      if (!a.length) return;
      var ss = false;
      var sheet = null;
      for (var i = 0; i < document.styleSheets.length; i++) {
         sheet = document.styleSheets[i];
         ss = (!sheet.media || !sheet.media.length);
         if (ss) break;
         for (var j = 0, m; m = sheet.media[j]; j++) {
            ss = (m.match(/^(\*)|(all)|(screen)$/i));
            if (ss) break;
         }
      }

      if (ss) sheet.insertRule(
         "SPAN.crsrTxt { \
         font: inherit !important; \
         color: inherit !important; \
         background: none !important; \
         padding: 0 0 0 0 !important; \
         margin: 0 0 0 0 !important; \
         clear: none !important; \
         z-index: inherit !important; \
         float: none !important; \
         display: inline !important; \
         cursor: text !important; }", 0);

      while ((textNode = a.pop())) {
         var span = document.createElement("span");
         if (ss)   span.className = "crsrTxt";
         else {
            span.style.color = "inherit";
            span.style.background = "none";
            span.style.padding = "0 0 0 0";
            span.style.margin = "0 0 0 0";
            span.style.clear = "none";
            span.style.zIndex = "inherit";
            span.style.float = "none";
            span.style.display = "inline";
            span.style.cursor = "text";
         }
         textNode.parentNode.insertBefore(span, textNode);
         span.appendChild(textNode);
      }
   }, 0);

I'll keep this blog entry updated to reflect the most recent version of the script, so stay tuned.

Known issue:

• Script may not work on poorly coded HTML and JavaScript websites (foxnews.com)
  
• There's a known crash bug in Opera 9.20 when using this script on newegg.com
  

BTW, feedback is always appreciated.

Enjoy.

Mason C reported in the opera.general newsgroup on Jan 30, 2007 that TitanTV.com schedules could not be printed in Opera. After reviewing his claim, I confirmed it and wrote this UserJS script to work-around the problem:

Download/view the titantv.js script

if (document.domain.match(/^(www\.)?titantv\.com$/)) {
   document.addEventListener("load",
      function(e) {
         var inps = document.getElementsByTagName("input");
         for (var i = 0, o; o = inps[i]; i++) {
            if (o.type != "image") continue;
            if (o.getAttribute("alternate") != "Print") continue;
            o.onclick = "window.open(document.forms.Form1.__PrintUrl.value,'','');";
            break;
         }
      }, 0);
}

NOTE: Once the script is installed, reload the page, then click the blue [Print] button that appears on the upper-right corner of their TV schedule pages. Clicking [Print] will open a new pop-up window with a printer-friendly version of the page -- so be sure your Opera pop-up blocker is not set to "Block All". And as always with UserJS scripts, be sure JavaScript is enabled, and that you place the .js file in the correct UserJS folder.

For those of you who use TitanTV.com (very nice, btw, compared to TVGuide.com), and prefer to print-out hard-copies of their TV schedules...enjoy.

Yes, Yahoo! stinks when it comes to web coding. Simply right-click any of their pages in Opera, select "Validate", and then watch the markup errors pile-up.

Anyhow, this latest script fixes their NFL and NCAA football play by play display in Opera.

For example:

• NFL Play-by-play
  
• NCAA Football Play-by-play
  

yahooNFL.js

if (document.domain.match(/^sports\.yahoo\.com$/) && 
  window.location.href.match(/&page=plays/)) {
  document.addEventListener("load",
    function() {
      var yspMainContent = document.getElementById("yspMainContent");
      if (!yspMainContent) return;
      yspMainContent.innerHTML = yspMainContent.innerHTML.replace(/\<thead\>/gi, '<table width="560" border="0" cellpadding="0" cellspacing="0"><thead>');
      yspMainContent.innerHTML = yspMainContent.innerHTML.replace(/\<\/tbody\>/gi, '</tbody></table>');
      }, 0);
}

To learn how to install this User JavaScript, visit UserJS.org

Enjoy.