RE: <script src=javascript:"..."> should do nothing

On Tue, 12 Aug 2008, Justin James wrote:
> 
> Just some thoughts. But most importantly, I cannot envision any scenario 
> where a developer would bank on a browser not interpreting a javascript: 
> URL in the @src of <script>.

Some of the things that Web sites do defy imagination. It's mind boggling 
the things you see on the Web when you start doing research into this kind 
of thing. I wouldn't at all be surprised to find a page that did something 
like:

   <script src="a.js"></script> <!-- defines var a = 1 -->
   <script src="javascript:a=2"></script>
   <script src="b.js"></script> <!-- requires a to == 1 -->

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'

Received on Tuesday, 12 August 2008 04:51:20 UTC