Q:I've noticed that recently, if you view the source on any tumblog page, at the top is a line of script that looks like it listens for the fake login and displays something with a warning not to enter login info. I haven't seen it pop up ever, but it looks like they are doing something about the fake login screens.

macmankev

I hadn’t noticed that, but I do see what you are talking about.

Unfortunately, the Tumblr developer who wrote that code didn’t take into account that the script he/she wrote will not actually run on the fake login box. The box itself is in something called an inline frame or iframe that loads content from a completely different server.

A web browser’s security will not allow JavaScript running in you blog page from interacting with or having any effect on what goes on inside that iframe. As a result, the protection Tumblr attempted to implement has no effect!

Alas, a better solution is needed!

25 Notes/ Hide