WebSandbox - Stock Ticker Sample

Home

Samples

Forums

This sample displays a portfolio of 4 stocks. The sandbox isolates the portfolio such that other code running in the page cannot read the stock symbols. The clock updates every 1 second, thus showing that the sample is still running. Try to inject exploit code (either by pasting it in the code box or uploading from an URI) that pulls information from the portfolio: extract the stock symbols; extract the values; stop the clock; and so on. The exploit code will run in the sandbox. Should you find a way to obtain this information you have circumvented it; let us know how you did it!

Trusted Sample

Stock Ticker Sample

Microsoft Corp - MSFT (09/15/2008 3:00:00 PM)

26.82

-0.80-2.90%

Google Inc - GOOG (09/15/2008 3:00:00 PM)

433.86

-3.80-0.87%

Yahoo! Inc - YHOO (09/15/2008 3:00:00 PM)

18.85

-0.23-1.21%

Amazon.com Inc - AMZN (09/15/2008 3:00:00 PM)

77.34

-0.96-1.23%

Sample Source Code

<html>
    <head>
        <title>Stock Ticker Sample</title>
        <base href="http://www.websandbox.org/"/>
        <link href="Images/favicon.ico" rel="icon" />
        <style>
            .sampleTitle
            {
                font-family: Segoe UI, Tahoma;
                font-size: 11pt;
                font-weight: bold;
                color: #07519A;
            }
            .stockSample
            {
	            height: 130px;
	            border: solid 1px lightgrey;
	            background: white;
	            background-repeat: repeat-x;
	            background-position: left top;
	            padding: 10px;
	            overflow-y: auto;
            }
            .tickerTime
            {
                font-family: Arial;
                font-size: 10.5pt;
                font-weight: normal;
            }
            .tickerValue
            {
                font-family: Arial;
                font-size: 11pt;
                font-weight: normal;
                padding-right: 10px;
            }
        </style>
    </head>
    <body>
        <div id="sample" class="stockSample">
            <div class="sampleTitle">Stock Ticker Sample</div>
            <br />
            <div class="sampleTitle">Microsoft Corp - MSFT <span class="tickerTime">(09/15/2008 3:00:00 PM)</span>
        </div>
        <span class="tickerValue">26.82</span><img src="http://www.websandbox.org/Images/down.gif" alt="Change" class="tickerValue"/>
        <span class="tickerValue">-0.80</span><span class="tickerValue">-2.90%</span>
    
        <div class="sampleTitle">Google Inc - GOOG <span class="tickerTime">(09/15/2008 3:00:00 PM)</span></div>
        <span class="tickerValue">433.86</span><img src="http://www.websandbox.org/Images/down.gif" alt="Change" class="tickerValue"/>
        <span class="tickerValue">-3.80</span><span class="tickerValue">-0.87%</span>

        <div class="sampleTitle">Yahoo! Inc - YHOO <span class="tickerTime">(09/15/2008 3:00:00 PM)</span></div>
        <span class="tickerValue">18.85</span><img src="http://www.websandbox.org/Images/down.gif" alt="Change" class="tickerValue"/>
        <span class="tickerValue">-0.23</span><span class="tickerValue">-1.21%</span>

        <div class="sampleTitle">Amazon.com Inc - AMZN <span class="tickerTime">(09/15/2008 3:00:00 PM)</span></div>
        <span class="tickerValue">77.34</span><img src="http://www.websandbox.org/Images/down.gif" alt="Change" class="tickerValue"/>
        <span class="tickerValue">-0.96</span><span class="tickerValue">-1.23%</span><br />

        <div id="currentTime" style="font-size:8pt; font-weight: normal; color:Gray"></div>

        <script type="text/javascript">
            window.setInterval(function() {
                document.getElementById("currentTime").innerText = new Date();
            }
            , 999)
        </script>
        </div>
    </body>
</html>

Create your gadget: Type code below OR upload via an URL.

Source: <html> <head> <title>Your Gadget's Title</title> <script type="text/javascript"> //JavaScript Goes Here </script> <style type="text/css"> /* CSS Styles Goes here */ </style> </head> <body> <p>Your Gadget's HTML goes here. Your HTML must be well-formed.</p> </body> </html>
URL

Transform via: Client (Requires Microsoft Silverlight) Server [ ? ]

Trusted Sample

Sample Source Code

Create your gadget: Type code below OR upload via an URL.

View Gadget Source

Untrusted Input

Trusted Transformed Output