Re: <script src=javascript:"..."> should do nothing

On Fri, 12 Oct 2007, Simon Pieters wrote:
> 
> Consider the following:
> 
>    <script src=javascript:"alert(1)"></script>
> 
> In Firefox, Opera, Safari and IE, the script of the resulting text/html 
> document "alert(1)" is not executed. The spec should reflect this 
> (probably in the "The javascript: protocol" section).
> 
> (Note that this is different to <script src=javascript:alert(1)></script>.)

Done.

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'

Received on Monday, 11 August 2008 10:15:05 UTC