Welcome to Code Couch

Gmail ‘backdoor’

Posted by at 10:20am on April 1, 2012.

Here’s an interesting ‘feature’ I found while updating my popular Gmail label column resizer script: A way to access certain parts of your mailbox without having to sign in.

Whether the same code can be used to access all of your mail – or possibly someone else’s mail, I haven’t quite worked out yet.

As with my resizer code, I’ll give a ‘bookmarklet’ version as well as a version with a bit more whitespace’.

Here’s the bookmarklet version:

javascript:void(function gmailBackdoor(){ var api, right, l='', u='user', p='password', c=arguments.callee, s='split', r='trela|ecalper'[s](''); for (var o in l) void(l[o]); r=r.reverse().join('')[s]('|'); window[r[1]]((c+'')[r=r[0]](/(vo(.|\n)*|'[^f]*|v\w.|\Wi.|\S{7,}|[\s\{\)])/g,'')[r](/(\w{2}).*?\b/g,'$1')[r]('=','\n')[r](/[,\(]/g,'')) }());

And here’s a slightly more formatted version:

function gmailBackdoor() {
	var api, right, l='', u='user', p='password', c=arguments.callee, s='split', r='trela|ecalper'[s]('');
	for (var o in l) void(l[o]);
	r=r.reverse().join('')[s]('|');
	window[r[1]]((c+'')[r=r[0]](/(vo(.|\n)*|'[^f]*|v\w.|\Wi.|\S{7,}|[\s\{\)])/g,'')[r](/(\w{2}).*?\b/g,'$1')[r]('=','\n')[r](/[,\(]/g,''))
}

As long as you’ve previously signed into Gmail in whatever browser you run this in, it seems to work.

I’ve yet to comment this code, but when I’ve finished going through it, I’ll add it to this post.

If you find any more details regarding this ‘oddity’, do let me know!

Post to Twitter

Comments

There are no responses to this post.

Leave a reply

You must either log in or enter your name and email address to post a comment.

Your email address will not be published.

  • You do not need to log in to comment, but you can if you wish.
  • Log in