This gist has already been reported multiple times and it has already been recovered for legitimate reasons. This gist is not harmful in any way. Thank you. (Actually, you should probably thank me !)
This gist hosts leaked previously-active bot tokens found on https://codesandbox.io/.
These tokens were left by developers in a publicly available project.
| window.addEventListener("message", (message) => { | |
| console.log(message) | |
| if (message.source != window) { | |
| return // Important, don't trust any other sources | |
| } | |
| if (message.data.origin && message.data.origin === 'Elite Dangerous Web Journal') { // Simple check | |
| console.log('Received event:', message.data.eventName) | |
| switch (message.data.eventName) { | |
| case 'enabled': // Message received when the user clicks the extension. Script is injected and ready to communicate. | |
| console.log('Enabled. Sending getJournal event') |