An Important Update

Dear Followers Of This Blog ...

If you did not use a Blogger / Google account when you Followed this blog, years ago, you are probably not Following now . During the past...

Thursday, January 31, 2013

Be Aware When You Install Third Party Code

We've been seeing a few problem reports, in Blogger Help Forum: Something Is Broken, from blog owners who are not aware of the risks from installing third party code, on their blog.

Some blog owners are not even aware that the code being installed is not supplied by Blogger - and is not subject to the same coding standards as code supplied by Blogger.

Third party accessories and code - from simple JavaScript that installs in the blog template, to attractive XML gadgets installed using the "Add a Gadget" wizard - has always been a challenge, to Blogger blogs.

Knowing when you are installing code provided by someone other than Blogger / Google, and taking appropriate precautions, is your responsibility. What you install can affect your reader activity - and even your reader's computers.

Blogger provides a large library of XML coded accessories, installed using the Layout "Add a Gadget" wizard.

Sadly, the Blogger "Add a Gadget" library is subject to abuse by hackers.
As we have learned in the past, however, the "Add a Gadget" accessory library is also used for distribution of non Blogger supplied gadgets. Gadgets supplied by Blogger are available using "Add a Gadget", and are labeled "By Blogger".

Google does have other accessory libraries - the late "iGoogle" library is one well known one. That aside, most Blogger blogs - and all non Google websites, which are used for distribution of Blogger accessories and gadgets - are non Blogger products.

Consider, carefully, any third party code.
Be aware of what you are about to install, on your blog.
  • A gadget provided using "Add a Gadget", and labeled "By Blogger" is a Blogger provided gadget.
  • A gadget provided using "Add a Gadget", but not labeled "By Blogger", is not a Blogger provided gadget.
  • A gadget provided using a Blogger blog, which is not published by Blogger, is not a Blogger provided gadget.
  • A gadget provided using a non Google website is not a Blogger provided gadget.

These are examples of Blogger supplied gadgets. Anything different is not a Blogger supplied gadget.

If you install non Blogger code in the template, and later see
Your blog has been deleted because of MALICIOUS JAVASCRIPT
this is a risk which you take.

Consider the risks involved, before installing third party code.
Do not install non Blogger code on your blog, without knowing the risks.

Dude, hit me with a comment!