W3C home > Mailing lists > Public > public-html@w3.org > November 2008

Re: document.close() in document.write()

From: Philip Taylor <pjt47@cam.ac.uk>
Date: Wed, 19 Nov 2008 18:08:56 +0000
Message-ID: <49245638.9010705@cam.ac.uk>
To: Henri Sivonen <hsivonen@iki.fi>
CC: HTML WG <public-html@w3.org>

Henri Sivonen wrote:
> 
> Consider (warning: test case freezes IE8 beta2 if XSS filter by-passed):
> http://software.hixie.ch/utilities/js/live-dom-viewer/?%3C!DOCTYPE%20html%3E%0A%3Cscript%3Edocument.write(%22%3Cscript%3Edocument.write(%27a%27)%3Bdocument.close()%3B%3C%5C%2Fscript%3EEND%22)%3B%3C%2Fscript%3E 

(That freeze is probably the same as 
https://connect.microsoft.com/IE/feedback/ViewFeedback.aspx?FeedbackID=366200 
and is caused by interaction with the Live DOM Viewer's iframe writing, 
so it's unrelated to what's trying to be tested here.)

-- 
Philip Taylor
pjt47@cam.ac.uk
Received on Wednesday, 19 November 2008 18:09:54 UTC

This archive was generated by hypermail 2.3.1 : Monday, 29 September 2014 09:38:59 UTC