W3C home > Mailing lists > Public > public-html@w3.org > August 2008

RE: <script src=javascript:"..."> should do nothing

From: Ian Hickson <ian@hixie.ch>
Date: Tue, 12 Aug 2008 04:50:42 +0000 (UTC)
To: Justin James <j_james@mindspring.com>
Cc: public-html@w3.org
Message-ID: <Pine.LNX.4.62.0808120445560.5136@hixie.dreamhostps.com>

On Tue, 12 Aug 2008, Justin James wrote:
> 
> Just some thoughts. But most importantly, I cannot envision any scenario 
> where a developer would bank on a browser not interpreting a javascript: 
> URL in the @src of <script>.

Some of the things that Web sites do defy imagination. It's mind boggling 
the things you see on the Web when you start doing research into this kind 
of thing. I wouldn't at all be surprised to find a page that did something 
like:

   <script src="a.js"></script> <!-- defines var a = 1 -->
   <script src="javascript:a=2"></script>
   <script src="b.js"></script> <!-- requires a to == 1 -->

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'
Received on Tuesday, 12 August 2008 04:51:20 UTC

This archive was generated by hypermail 2.3.1 : Monday, 29 September 2014 09:38:57 UTC