DEV Community

Discussion on: I tried to mount a client-side "attack" on a news website poll by using only Javascript. And I failed miserably.

Collapse
 
jonsamp profile image
Jon Samp

If you’re open to running a script from outside the website (a node script), you could use a tool like puppeteer to open a web page, then have it click on the poll, then have it repeat the process indefinitely. It would mimic a real user so there would be no CORS issues. This is similar to how you would end-to-end test a website, but in this case you’d be “testing” another site.

Collapse
 
ispoljari profile image
Ivan Spoljaric • Edited

Hey. Thx for the comment. I thought of a Node.js approach to bypass CORS. Not sure if it would work though - because iframes are weird. In any case that wouldn't be a client-side "attack" anymore.