EnDe Icon


     

 
    |   Check-Test   HTTP-Test
  

Load File  > 


User API OptionsValuesPrefixSuffixDelimiterKey/CipherOutput Formatmode

size

Iterations typ
JSReg sandbox:       call eval:

character encoding


insert specified or selected character in selected field below
character : 
specials : 
   |       |   
  ^ checkboxes not yet used

       

Special Unicode Characters Char hex decimaloctal   hex binary
Unicode
UTF-8


Encoding
       
Decoding
       

 

IP:
  quad dotted value   plain value  
IPv6:   : 64-bit int  |  
URL:   : 32-bit int
hex:   : 0x prefixed hex
octal:    
binary:  
     


2/4

Name

strict

now

ms

ns

GMT

TZ
>2001
is negative



  Year Month Day Hour Min. Sec.     Ref. Time.:
Date | Time: Timestamp:
readable: Offset:
         

Prefix:

RegEx      
Text ..

Score Value Description | Score Value Description
|
|
|
|
|
 
 
 
 




As descibed in GENERAL DESIGN HINTS the (browser) GUI of EnDe is designed to work with just one click on all buttons and menu items.
Any form field should have a brief description showing up when the mouse is over the field or menu item.
Unfortunately there're some browsers in the wild which don't comply to the standards and behave different. It's sometimes difficult to get the expected functionality, sometimes even impossible.
The settings here provide some workarounds for these browsers. Just choose the settings proper for your browser and reload the page using the button.
  • privileges
    Some browsers (i.e. all mozilla-based) need special privileges for some actions, mainly reading files. These privileges are not set automatically but only on demand.
    Each button sets the listed privilege. Watch out for exceptions.
    Buttons work immediately, no [reload] necessary.

  • Due to good security reasons some browser restrict access to the full path of the file given with the input type=file tag. If we want to read such files from the local system anyway, we need to provide a proper path to the directory.
    Default of this path is given in the URL, which is most likely sufficient if EnDe is served from file:///.
    NOTE that the default will be a full URL with schema if it is not file:///.
    Setting works immediately, no [reload] necessary.
  • Various problems (see below settings) exist in the behaviour of standard HTML SELECT menus (the traditional popup menus in one line and the pulldown arrow right).
    For example do all menus use the title= attribute to provide additional descriptions, in particular most of the menus added by the Menu File.
    Most SELECT menus in EnDe can be replaced with menus build of UL and A (which support descriptions) by checking this option. Using flat menus may result in strange layouts in some sections. It's just an ugly workaround, though ...
    NOTE that these menus can be changed permanently by changing the key html SELECT to html ANCHOR in the corresponding menu file (i. e. EnDeMenu.txt).
  • HTML's SELECT menu usualy needs a click on the selected (OPTION) item. This is necessary wether it is a single or multiline menu. As we always want to have just one click, the selected item needs to call the assigned handler when the "onClick" event is triggered. This is the default setting as implemented in most browsers.
  • HTML's SELECT menu usualy needs a click on the selected (OPTION) item. This is necessary wether it is a single or multiline menu. As we always want to have just one click, the selected item needs to call the assigned handler when the "onClick" event is triggered. Some browser don't work proper with "onClick" but with "onChange". If no action is done when such a menu is used, or the action is executed with the second click, then this setting might help.
  • A tags use the onClick= attribute to catch events before calling the assigned URL. If the assigned event handler returns false, the assigned URL must not be called.
    Some browsers do not honor this behaviour but work as expected when the URL uses the javascript: schema. Unchecking this option uses href="javascript:..." instead of onClick= attribute.
    Subject to this behaviour are most likely the A tags used in the selection menus found left in the tools.
  • Workaround for browsers which do not use the OPTION's innerHTML value for the text visible in the menu but use the OPTION's label= attribute instead.
    If the menus show very long texts and have no title, setting this option might help.
  • If following error message is shown (in developer window) the browser needs to be restarted with proper options.
    Firefox:

    if privacy.file_unique_origin:false was set:
    Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at file:///path/to/EnDeFile.txt. (Reason: CORS request not http).
    chromium:

    Access to XMLHttpRequest at 'file:///path/to/EnDeMenu.txt' from origin 'null' has been blocked by CORS policy: Cross origin requests are only supported for protocol schemes: http, data, chrome, chrome-extension, https.
  • Reload page with specified settings.

This browser does not support reading files useing 'file:///'
Try to start the browser with one of follwoing options:
  • chromium < 76:

    chromium --allow-file-access-from-files
  • chromium > 75:

    chromium --allow-file-access-from-files --user-data-dir=/tmp/dumm
  • chrome < 76:

    chrome --allow-file-access-from-files
  • chrome > 75:

    chrome --allow-file-access-from-files --user-data-dir=/tmp/dumm
  • Chrome < 76:

    open /Applications/Google\ Chrome.app/ --args --allow-file-access-from-files
  • Chrome > 75:

    open /Applications/Google\ Chrome.app/ --args --allow-file-access-from-files --user-data-dir=/tmp/dumm
  • Firefox > 68:
    set in about:config :
    privacy.file_unique_origin:false or
    security.fileuri.strict_origin_policy:false
    (no restart required)
  • Safari:

    /Applications/Safari.app --disable-web-security
    works with older Safari < 6.x, in newer Safari you need to enable the Developer menu and there:
    Disable Local File Restrictions. or change the prefs.js file like: pref("capability.policy.default.checkloaduri.enabled", "allAccess");
  • IE 11:
    IE 11 does not allow it at all.
EnDe Icon  EnDe  OWASP Icon
Test