W3C home > Mailing lists > Public > public-html@w3.org > August 2008

Re: <script src=javascript:"..."> should do nothing

From: Garrett Smith <dhtmlkitchen@gmail.com>
Date: Mon, 11 Aug 2008 23:52:55 -0700
Message-ID: <c9e12660808112352w53067c46va98fab0d1d3f517d@mail.gmail.com>
To: "Simon Pieters" <simonp@opera.com>
Cc: public-html <public-html@w3.org>

On 10/12/07, Simon Pieters <simonp@opera.com> wrote:
>
>  Consider the following:
>
>    <script src=javascript:"alert(1)"></script>
>
>  In Firefox, Opera, Safari and IE, the script of the resulting text/html
> document "alert(1)" is not executed. The spec should reflect this (probably
> in the "The javascript: protocol" section).
>

How is:-

"alert(1)"

a text/html document?

What it looks like is a string value in a javascript: pseudo url.

Garrett

>  --
>  Simon Pieters
>  Opera Software
>
>
Received on Tuesday, 12 August 2008 06:53:30 UTC

This archive was generated by hypermail 2.3.1 : Monday, 29 September 2014 09:38:57 UTC