Say I was, or somebody was to inject custom Javascript on my website via the console. To say fire the Facebook pixel via Javascript. Or to simulate real mouse movement via Javascript.
Is it possible for the website to detect this has been done?
1 Answers
No. The developer's console is entirely temporary. Now let's say that you created a function that is run off of a server, let's say a function that sends a message to other people on the same server, (ie. Instant Messaging). If you send a message through a server, then it can be seen, but that is only if you send the message through a server. But if you just type a function into the console that returns the words, "Hello, World" that can not be seen by anyone. So, in conclusion, if you use a function hooked up to a server, that sends data back to the server, then yes, it can be seen, but like the example you gave, the Facebook Pixel, that is sent from Facebook, but implement it in your site; it is run from the server from Facebook, not your website.
Related