W3C home > Mailing lists > Public > public-html@w3.org > November 2008

Re: document.close() in document.write()

From: Philip Taylor <pjt47@cam.ac.uk>
Date: Wed, 19 Nov 2008 18:08:56 +0000
Message-ID: <49245638.9010705@cam.ac.uk>
To: Henri Sivonen <hsivonen@iki.fi>
CC: HTML WG <public-html@w3.org>

Henri Sivonen wrote:
> Consider (warning: test case freezes IE8 beta2 if XSS filter by-passed):
> http://software.hixie.ch/utilities/js/live-dom-viewer/?%3C!DOCTYPE%20html%3E%0A%3Cscript%3Edocument.write(%22%3Cscript%3Edocument.write(%27a%27)%3Bdocument.close()%3B%3C%5C%2Fscript%3EEND%22)%3B%3C%2Fscript%3E 

(That freeze is probably the same as 
and is caused by interaction with the Live DOM Viewer's iframe writing, 
so it's unrelated to what's trying to be tested here.)

Philip Taylor
Received on Wednesday, 19 November 2008 18:09:54 UTC

This archive was generated by hypermail 2.3.1 : Thursday, 29 October 2015 10:15:39 UTC