The Browser Highlighter – Firefox addon is a malware also

You may can try to search on google such following string:

var LEO_HIGHLIGHTS_INFINITE_LOOP_COUNT = 300; var LEO_HIGHLIGHTS_MAX_HIGHLIGHTS = 50;

There are many websites are having these text without knowing where it’s coming from and how to solve, here I met this issue at my colleague’s PC while editing Confluence page and finally I found the issue as I have already experienced with “Site Advisor” recently.

Now it’s “The Browser Highlighter” add-on again!

• https://addons.mozilla.org/en-US/firefox/addon/11808/ WHY FIREFOX ALLOWS THIS!

The issue may found when:

• The Browser Highlighter v1.0.19126 (eBay Inc. – from this company?)
• Open a richeditor, in my case: using Confluent page
• Write something on the page
• Click Save, you need to wait for a bit time as the add-on is being adding the malware text
• Here is the example text added to the footer of the document:

var LEO_HIGHLIGHTS_INFINITE_LOOP_COUNT = 300; var LEO_HIGHLIGHTS_MAX_HIGHLIGHTS = 50; var LEO_HIGHLIGHTS_IFRAME_TOP_ID = “leoHighlights_top_iframe”; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_ID = “leoHighlights_bottom_iframe”; var LEO_HIGHLIGHTS_IFRAME_DIV_ID = “leoHighlights_iframe_modal_div_container”; var LEO_HIGHLIGHTS_IFRAME_TOTAL_COLLAPSED_WIDTH = 520; var LEO_HIGHLIGHTS_IFRAME_TOTAL_COLLAPSED_HEIGHT = 391; var LEO_HIGHLIGHTS_IFRAME_TOTAL_EXPANDED_WIDTH = 520; var LEO_HIGHLIGHTS_IFRAME_TOTAL_EXPANDED_HEIGHT = 665; var LEO_HIGHLIGHTS_IFRAME_TOP_POS_X = 0; var LEO_HIGHLIGHTS_IFRAME_TOP_POS_Y = 0; var LEO_HIGHLIGHTS_IFRAME_TOP_WIDTH = 520; var LEO_HIGHLIGHTS_IFRAME_TOP_HEIGHT = 294; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_POS_X = 96; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_POS_Y = 294; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_COLLAPSED_WIDTH = 425; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_COLLAPSED_HEIGHT = 97; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_EXPANDED_WIDTH = 425; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_EXPANDED_HEIGHT = 371; var LEO_HIGHLIGHTS_SHOW_DELAY_MS = 300; var LEO_HIGHLIGHTS_HIDE_DELAY_MS = 750; var LEO_HIGHLIGHTS_SHOW_DELAY_NO_UNDER_MS = 850; var LEO_HIGHLIGHTS_BACKGROUND_STYLE_DEFAULT = “transparent none repeat scroll 0% 0%”; var LEO_HIGHLIGHTS_BACKGROUND_STYLE_HOVER = “rgb(245, 245, 0) none repeat scroll 0% 0%”; var LEO_HIGHLIGHTS_ROVER_TAG = “711-36858-13496-14”; createInlineScriptElement(“var%20LEO_HIGHLIGHTS_DEBUG%20%3D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20false [..]

I found there are around 54275 characters.

So solution, check your firefox addon and remove “The Browser Highlighter“, then restart the firefox.