From 5d263147b195af6f37d9c4ce0e72a38b3674ce2b Mon Sep 17 00:00:00 2001 From: Jonathan Hodgson Date: Fri, 4 Sep 2020 18:00:08 +0100 Subject: [PATCH] Adds initial tridactyl config --- .../.config/tridactyl/scripts/clickjacking | 68 +++++++++++++++++++ tridactyl/.config/tridactyl/tridactylrc | 63 +++++++++++++++++ 2 files changed, 131 insertions(+) create mode 100755 tridactyl/.config/tridactyl/scripts/clickjacking create mode 100644 tridactyl/.config/tridactyl/tridactylrc diff --git a/tridactyl/.config/tridactyl/scripts/clickjacking b/tridactyl/.config/tridactyl/scripts/clickjacking new file mode 100755 index 00000000..0e0d53dc --- /dev/null +++ b/tridactyl/.config/tridactyl/scripts/clickjacking @@ -0,0 +1,68 @@ +#!/usr/bin/env bash + +if [ "$1" = "-h" ] || [ "$1" = "--help" ]; then + cat << 'EOF' +Usage: clickjacking url + +Will return a dataurl to open in a browser +EOF + exit 0 +fi + +die(){ + echo "$@" + exit 1 +} + +# Url of site to put in iframe +url="$1" + +# If no argument is given, get stdin +[ -z "$url" ] && url="$(cat -)" + +# If still no url, bail +[ -z "$url" ] && die "You need to provide a url" + +source=" + + + + + + Clickjacking example + + + +

Clickjacking example

+ +

If content is rendered above, the site is vulnerable to clickjacking

+ + +" + + +echo "data:text/html;base64,$(echo "$source" | base64 -w 0)" diff --git a/tridactyl/.config/tridactyl/tridactylrc b/tridactyl/.config/tridactyl/tridactylrc new file mode 100644 index 00000000..384d2bbf --- /dev/null +++ b/tridactyl/.config/tridactyl/tridactylrc @@ -0,0 +1,63 @@ +" Reset +" This resets all default settings +sanitize tridactyllocal tridactylsync + +""""""""""""""""""""" +" General Options " +""""""""""""""""""""" +colours dark + +set newtab about:blank +set browser firefox-developer-edition +set allowautofocus false +set editorcmd /usr/bin/st -e vim + +"""""""""""" +" Search " +"""""""""""" + +" Remove old search urls +jsb Object.keys(tri.config.get("searchurls")).reduce((prev, u) => prev.then(_ => tri.config.set("searchurls", u, null)), Promise.resolve()) + +set searchengine ddg + +set searchurls.alternativeto https://alternativeto.net/browse/search/?q=%s +set searchurls.ebay https://www.ebay.co.uk/sch/i.html?_nkw=%s +set searchurls.ddg https://duckduckgo.co.uk/?q=%s +set searchurls.aur https://aur.archlinux.org/packages/?O=0&K=%s +set searchurls.aw https://wiki.archlinux.org/?search=%s +set searchurls.gh https://github.com/search?q=%s + +"""""""""""""" +" Commands " +"""""""""""""" + +command withUrl composite get_current_url | +command openvid withUrl !s open-youtube +command openvidLink composite hint -pipe a[href]:not([display="none"]):not([href=""]) href | !s open-youtube +command testclickjacking withUrl !s $HOME/.config/tridactyl/scripts/clickjacking | nativeopen + + + +""""""""""" +" Binds " +""""""""""" +" +" Ctrl-F should use the browser's native 'find' functionality. +unbind + +bind / fillcmdline find +bind ? fillcmdline find -? +bind n findnext 1 +bind N findnext -1 + +bind ; fillcmdline_notrail + +bind y openvid +bind Y openvidLink + +" Url Specific +bindurl ^https://duckduckgo.com f hint -Jc [class=result__a] +bindurl ^https://duckduckgo.com F hint -Jbc [class=result__a] + +