+n- Flaw in IE
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.lang.javascript archive

+n- Flaw in IE

From: Java script Dude <despam2004@yahoo.ca>
Date: Fri Jan 13 2006 - 00:19:39 CET

Give this a test in IE (verified in IE 6.0 sp2)

Has anybody else seen this and is there a workaround besides escaping
with html special chars and not using IE ;]

~ file 1 ~
<html>
    <head>
        <title>IE +n- Flaw Tester</title>
    </head>
    <body>
        <script>
            window.open("./_pitest.html")
            window.focus()
        </script>
    </body>
</html>
~ file 1 end ~

~ file 2 ~
<html>
    <head>
        <title>Wacky IE Flaw :]</title>
    </head>
    <body>
        +1-
        <script>
            var v="a"+"A"
        </script>
    </body>
</html>
~ file 2 end ~

Notes:
- Any instance of +n - (where n=integer) will cause JavaScript string
concatenations to blow up
- Loading in new window helps error to come out but is not always
necessary
- Now you say, but who will put in `+n-`?
- .[a] Think phone numbers in Europe :[
Received on Tue Jan 17 17:10:43 2006