How to Spot Unsafe Scripts
From Arcanum Illyria
| This article is a stub. Improve it by adding information or re-organizing it to match the structure and contents of related mature pages. |
When trying out or installing new user scripts, first and foremost take note of the places they will run. Your browser will always show this information in the script install screen, in the form of a list of include/exclude wildcard-urls. Scripts should never be running where they are not needed. For Illyriad, that means they should only run in urls like http://uk1.illyriad.co.uk/*.
Pay special attention that the script will not run on either the login page (http://uk1.illyriad.co.uk/login.asp) or in the forums (http://forum.illyriad.co.uk/*) unless it actually provides features for the forums, which is unlikely. A typical script for Illyriad can accomplish all it needs from within the following rules:
@include http://*.illyriad.co.uk/* @exclude http://*.illyriad.co.uk/login.asp @exclude http://forum.illyriad.co.uk/*
It is perfectly acceptable for a script to run on a more specific subset of safe pages, like http://*.illyriad.co.uk/view_town.asp. As long as the script is not running on the login page or the forums, you're at least safe from game account theft. So long as it doesn't run anywhere outside the game, your safe from theft of other unrelated accounts and browser attacks from malware-hosting webservers. There's still the potential that someone could be hijacking login sessions or controlling your account through the script, but these are lesser and less likely threats--at least the account stays primarily in your control.
