Wireshark-dev: Re: [Wireshark-dev] Is wireshark.org possibly hacked?

From: Roland Knall <rknall@xxxxxxxxx>
Date: Tue, 25 Jun 2024 18:30:31 +0200
We will be looking into it

kind regards
Roland

Am Di., 25. Juni 2024 um 18:24 Uhr schrieb Triton Circonflexe <triton+enuiqr@xxxxxxxxxx>:
It seems to be an issue with the placement of the clear/dark theme _javascript_.

I checked the about.html page with a simple "view source" and Firefox
is also complaining about the fact that the <html> tag is not the root
of the document.

In fact, we see

<!DOCTYPE html>

<script>
    const currentTheme = localStorage.getItem("theme");
    document.documentElement.className = currentTheme;
</script>

<html …>…</html>

in all pages while the script tag should probably be inside the <head>
tag (but my last go at HTML was with HTML 4.01 so I’ll let someone
more competent take over from there.

Le mar. 25 juin 2024 à 16:05, Kate <kateshadowhouse@xxxxxxxxx> a écrit :
>
> or possibly a code review(of the website)?
>
>
> checked sucuri sitecheck :
>
>
> https://sitecheck.sucuri.net/results/https/www.wireshark.org
>
> warning.html_anomaly
>
> Description:
> We detected anomaly in HTML code placement. Typical anomalies are placement of scripts and iframes outside of the <html>..</html> block, which means that it was don't by someone who is not familiar with the web page generation process of this particular site (massive automated infection) or simply doesn't have access to the code that generates webpages (for example, server-level infections that append malware to every server response). This is a strong signal that a stranger tried to modify web pages.
>
>
>
> Site Issue Detected
>
> http://www.wireshark.org/ (More Details)
>
>
> Anomaly behavior detected (possible malware): warning.html_anomaly?1
> Site Issue Detected
>
> https://www.wireshark.org/ (More Details)
>
>
> Anomaly behavior detected (possible malware): warning.html_anomaly?1
> Site Issue Detected
>
> https://www.wireshark.org/about.html (More Details)
>
>
> Anomaly behavior detected (possible malware): warning.html_anomaly?1
> Site Issue Detected
>
> https://www.wireshark.org/docs/ (More Details)
>
>
> Anomaly behavior detected (possible malware): warning.html_anomaly?1
> Site Issue Detected
>
> https://www.wireshark.org/download.html (More Details)
>
>
> Anomaly behavior detected (possible malware): warning.html_anomaly?1
> Site Issue Detected
>
> https://www.wireshark.org/faq.html (More Details)
>
>
> Anomaly behavior detected (possible malware): warning.html_anomaly?1
> Site Issue Detected
>
> https://www.wireshark.org/learn (More Details)
>
>
> Anomaly behavior detected (possible malware): warning.html_anomaly?1
> Site Issue Detected
>
> https://www.wireshark.org/lists/ (More Details)
>
>
> Anomaly behavior detected (possible malware): warning.html_anomaly?1
>
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives:    https://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
>              mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe