Quote from: Spendulus on April 22, 2013, 02:14:18 PM

Quote from: scottycc on April 05, 2013, 07:59:04 PM

Hello! I created http://coinwidget.com/ , a new customizable Bitcoin Donation/Tip button generator. Here is what it looks like:

Here is what it looks like:

When you click on it this window is shown:

Features:

The 'Donate' , 'My Bitcoin Address', 'donations' and 'BTC' text can all be changed.
The counter can be hidden, show the number of transactions (default), or show the total amount received.
Hover over the QR icon in the bottom left to show a large scannable QR code.
The wallet with arrow icon is a bitcoin: URI compatible link.

Please share any ideas or suggestions you may have to improve on this widget. Thanks for viewing!

Sure. Here you go.

Your widget directs those who click to a javascript program on your website.

What happens at that point is strictly determined by what the code does. And we can examine that by typing the following into the command bar:

http://c.coinwidget.com/widget.js

which yields:

http://d1e4zb60eak76i.cloudfront.net/widget.js

Which could be A on 2013-01-01 and B on 2014-01-01.

So you redirect a person from a website to coinwidget.com and then run a javascript to take money.

The person never knows what that javascript does and it could change, either by malicious intent or by your website being hijacked.

The simplest case would be to use a different QR code.

Im also looking for a Bitcoin Donate Widget, but I don't like the idea of sending my donors to an third party site of the programmer running javascript.

The operator of the external site may be honest, but it's still javascript running on a third party site which he controls and not you.