From: Kevin Carhart <kevin@carhart.net>
To: edbrowse-dev@lists.the-brannons.com
Subject: [Edbrowse-dev] immediate evaluation of js on appendChild
Date: Tue, 14 Jun 2016 21:17:14 -0700 (PDT) [thread overview]
Message-ID: <alpine.LRH.2.03.1606142050180.31841@carhart.net> (raw)
Suppose a site author has a piece of javascript stored in the .text
property of a script element. It's only a string. But now controlling JS
code runs appendChild of that script element. Possibly insertBefore too.
Now that javascript code is part of the DOM. I think this code is
supposed to evaluate immediately. Does this ring a bell and if it's
something that should happen but currently doesn't, what would be an
appropriate place to implement it?
Maybe it could be done directly in startwindow.js, because side effects
from the code in question will be dealt with as the chunk of JS is itself
addressed line by line and the JS functions trigger the existing side
effects code. eval() comes to mind though I think it is considered
harmful.
thanks
Kevin
next reply other threads:[~2016-06-15 4:15 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-06-15 4:17 Kevin Carhart [this message]
[not found] ` <20160515130957.eklhad@comcast.net>
2016-06-15 23:27 ` Kevin Carhart
2016-06-17 2:00 ` Karl Dahlke
2016-06-17 19:48 ` Kevin Carhart
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=alpine.LRH.2.03.1606142050180.31841@carhart.net \
--to=kevin@carhart.net \
--cc=edbrowse-dev@lists.the-brannons.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).