[LINK] The Australian IT site.

Eric Scheid eric.scheid at ironclad.net.au
Fri Aug 31 08:24:24 AEST 2007


On 31/8/07 6:58 AM, "Howard Lowndes" <lannet at lannet.com.au> wrote:

> Bernard Robertson-Dunn wrote:
>> document.write('<SCR');
>> document.write('IPT
> 
> This,
> 
>> document.write('</SCR');
>> document.write('IPT>');
> 
> and this, tell me that they are attempting to do some deliberate
> obfuscation which is sus, to say the least.

Not really. there are some browsers that are a bit dumb when it comes to
decoding <script> blocks, they simply scan ahead looking for a matching
</script> string ... which if it is inside a document.write means a
premature closure and all sorts of buggy behaviour. You don't actually want
buggy behaviour, do you?

Google is your friend:

<http://google.com/search?hl=en&q=document.write('</SCR')&btnI=I'm+Feeling+L
ucky>
<http://www.webmasterworld.com/forum91/2913.htm>

e.




More information about the Link mailing list