This repo (https://github.com/dergachev/githtml.git) was forked from https://github.com/ryt/githtml.git to illustrate an XSS vulnerability in the latter, as reported in ryt#9
To try the potentially more secure version of githtml.js, add a bookmarklet using the following URL:
javascript:(function(){var d=document,s=d.createElement('script');s.src='//raw.github.com/dergachev/githtml/master/githtml.js';d.body.appendChild(s);})();
For a diff of the code, see https://github.com/dergachev/githtml/compare/master
githtml is a utility that lets you view rendered HTML pages from github repositories on the fly.
Install from http://ryt.github.com/githtml/
- Create a new bookmark in your bookmarks bar named
git-html
- Copy and paste the following code as the link or URL of the bookmark.
javascript:(function(){var d=document,s=d.createElement('script');s.src='//raw.github.com/ryt/githtml/master/githtml.min.js?2';d.body.appendChild(s);})();
Alternatively, if github allows you, you can drag [this] to your bookmarks bar.
These are HTML pages from various repos.
Browse them and click on the "git-html" bookmark to render them.
Note: make sure you allow pop-ups from *.github.com in your browser.
Note 2: This works best with Chrome or Safari. Firefox won't load js and css files for some of these links. Will fix soon.