From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received-SPF: None (mailfrom) identity=mailfrom; client-ip=8.23.224.60; helo=out.smtp-auth.no-ip.com; envelope-from=kevin@carhart.net; receiver= Received: from out.smtp-auth.no-ip.com (smtp-auth.no-ip.com [8.23.224.60]) by hurricane.the-brannons.com (Postfix) with ESMTPS id 88F3677D9F for ; Mon, 29 Jan 2018 15:23:51 -0800 (PST) X-No-IP: carhart.net@noip-smtp X-Report-Spam-To: abuse@no-ip.com Received: from carhart.net (unknown [99.52.200.227]) (Authenticated sender: carhart.net@noip-smtp) by smtp-auth.no-ip.com (Postfix) with ESMTPA id F181032E for ; Mon, 29 Jan 2018 15:24:10 -0800 (PST) Received: from carhart.net (localhost [127.0.0.1]) by carhart.net (8.13.8/8.13.8) with ESMTP id w0TNO9Gh030827 for ; Mon, 29 Jan 2018 15:24:09 -0800 Received: from localhost (kevin@localhost) by carhart.net (8.13.8/8.13.8/Submit) with ESMTP id w0TNO9oW030823 for ; Mon, 29 Jan 2018 15:24:09 -0800 Date: Mon, 29 Jan 2018 15:24:08 -0800 (PST) From: Kevin Carhart To: Edbrowse-dev@lists.the-brannons.com Message-ID: User-Agent: Alpine 2.03 (LRH 1266 2009-07-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; CHARSET=US-ASCII; format=flowed Content-ID: Subject: [Edbrowse-dev] Dynamic Scripts (fwd) X-BeenThere: edbrowse-dev@lists.the-brannons.com X-Mailman-Version: 2.1.25 Precedence: list List-Id: Edbrowse Development List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jan 2018 23:23:51 -0000 Ahh, this is great! I think this is a big one. I think we brought it up at one time and set it aside. Do you think it's the same as the following? Check it out, we touched on this way before duktape. I copied and pasted this old list traffic a long time ago, and when I read your message, I thought it sounded like the same thing. Exemplified by http://carhart.net/~kevin/immediate.html On Wed, 15 Jun 2016, Karl Dahlke wrote: > Is there some simple js you could whip up and post, > as an example, so I know what you're talking about? > > Karl Dahlke > --- I replied: Hi Karl Yes.... could you go to http://carhart.net/~kevin/immediate.html? In edbrowse nothing will happen so please 'ub' for the HTML source. Now if I bail out and try it in my firefox, the alert will fire. I'm not sure precisely which line it occurs on. But there is not an eval() in javascript, so I think there must be evaluation supplied by the DOM. I believe this is the purpose of the iframe formulation in the google groups page we were talking about a while ago. immediate.html is a simpler version of the construction that they use. Since google is doing it, it may be a common phrasing. --- Karl replied: > frame.contentDocument.write(html); The key here is, I think, when we design the new Iframe object, that Iframe.contentDocument.write() somehow invokes the innerHTML machinery. That parses and executes html immediately, though if that html has