Der ASTRO-RECHNER

    • Info: Astrophysik Ressourcen-Rechner
    • Author: Blechdose
    • Website:
    • Support:Discord/forum
      https://discord.gg/whm3e8aJmz
    • Download: snip
    • Screenshot:
    • Browser:Chrome
    • Compability:Computer
    • Languages:DE



    Hello Hello :)


    Me calculator (the HTML code) is a comprehensive web tool for resource planning for OGame (astrophysics) based on individual exchange rates (MSE).



    "Let me introduce you to the ASTRO CALCULATOR, the ultimate planning tool for OGame. It is based on the 3:2:1 MSE rate (deuterium equivalent) and solves the biggest problem: precise timing!


    -1- Input: You enter your fleet, your astro destination and your daily production.


    -2- Tracking: You can log your expo finds on a daily and weekly basis.


    -3- The result: The calculator provides you with the MSE values for everything and, most importantly, the exact number of days you still need, by automatically taking all income into account and converting the deficit into your MSE standard.


    -4- Extra: You can see the scrap value of your fleet immediately if you need to free up resources.



    The 5 most important advantages of your tool Your astro calculator offers several decisive advantages over manual tables or simple estimates:


    1. Precise time planning (the most important key figure!) The calculator provides you with the exact number of days required (under ‘Days still needed’) to achieve your astro goal. Advantage: The calculation is based on your total income (mine production + farm attributes) and the correct MSE value of the remaining deficit. You always know exactly when you will be finished.


    2. Dynamic resource aggregation

    The tool automatically combines all your sources of income and assets to create a realistic picture:


    Astro target costs: What you need.


    Current resources: What you already have.


    Expo results: What you have already collected through expeditions (totalled over several weeks).


    Daily income: What is added each day.


    3. Integrated ‘Expo Week Tracker’

    You can enter your results for each week individually.


    Advantage: The total weekly sums are calculated automatically and transferred to the ‘All Weeks Total’ sum. This allows you to track your progress accurately without having to add up the figures manually.


    4. Automatic value analysis (MSE & scrap): The tool automatically converts all costs into your defined standard MSE value (deuterium equivalent): Fleet overview: Shows you the real value of your fleet and each individual ship type. Scrap values: Instantly calculates the potential yield of the fleet at different scrap rates (70%, 79%, 81%) – including conversion to MSE value.


    5.Intelligent data storage

    All entries (fleet, resources, expos) are automatically saved in the browser.


    Advantage: You can close the tool at any time and reopen it later. Your data is backed up without you having to upload or save a file.


    https://imgur.com/a/SziOTAH

    https://imgur.com/AiUMZu3

    https://imgur.com/dCLDWv5

    Best Regards

    Blechdose


    EDIT by RiV-

    Removed URL

    Edited 3 times, last by Blechdose ().

    Security audit:


    You use innerHTML / template strings in several places, including:

    • document.getElementById('total-daily-income').innerHTML = ...
    • tbody.innerHTML = '' followed by row.innerHTML = \...`inrenderFleetTable()/renderExpoTable()`

    Why it matters:

    • You include ship.name directly inside row.innerHTML.
    • If someone pastes a value like "><img src=x onerror=alert(1)> into the ship name field, it could become executable HTML inside the extension page.

    Impact:

    • In a Chrome extension page, DOM XSS can be more serious than a normal webpage (depending on what APIs are reachable from that context). In this extension, there’s no network/exfil code, but it’s still a real injection risk.

    Mitigation:

    • Prefer textContent and creating elements with document.createElement rather than HTML strings.
    • Or at minimum, escape user-provided strings before interpolating into innerHTML.


    Main actionable security improvement is to remove/avoid innerHTML with user-controlled values (especially ship.name) to prevent DOM XSS inside the extension UI.

  • RiV-

    Approved the thread.

    Hello Blechdose,


    your tool has been reviewed and approved for toleration.


    However, the current deployment via a Google Drive upload is not suitable for long-term toleration, as it does not allow reliable versioning and change tracking. For tolerated tools, it must be possible to clearly identify updates and verify what has changed between versions.


    Please deploy your tool in a way that allows transparent version tracking (for example via a versioned release system or a publicly accessible repository). This ensures that updates can be reviewed and prevents unnoticed changes after toleration has been granted.


    Once the deployment method has been adjusted accordingly, the toleration can remain in effect.


    Thank you for your cooperation.