Re: Issues arising from not reparsing

On Aug 10, 2009, at 14:14, Henri Sivonen wrote:

> In case #1, I think the right fix is to introduce more statefulness  
> into the escapes so that <!-- and --> that occur inside string  
> literals are heuristically ignored. (Anyone care to suggest a  
> heuristic that doesn't involve rolling a JS parser into the HTML  
> parser?)


A more radical way to address this would be making "..." and '...'  
escape </script> to cater for the document.write() case and not  
letting <!-- ... --> be magic.

-- 
Henri Sivonen
hsivonen@iki.fi
http://hsivonen.iki.fi/

Received on Monday, 10 August 2009 12:01:45 UTC