Naturally your examples do not error since you have demonstrated a
JavaScript string containing the text "</script>" which is not contained
within "real" script tags.  My onus however, was not to prove that EVERY
arbitrary "</script>" embedded within a JS string in an HTML document
would error but rather the possibility of such errors were not an "edge
case".  Your examples, while accurate, do not preclude the many ways JS
strings can and are contained within real script tags.  

Regardless of how you want to classify the behavior, these facts still
remain:
-- The CF Docs appear to only be accurate based on how tightly you
define "safe".
-- The Docs make no official note that the jsstringformat will NOT
produce a string which can safely be output within script tags in an
HTML page.
-- It is my opinion that this caveat is not obvious enough to assume
readers will consider it.
-- The CF docs are for public consumption, not for a super-elite ring of
CFer's who already have intimate knowledge of the language.

Ahh... we have digressed far-- as usual.  My original intent was not to
pick on the Docs, but to provoke open-minded discussion and elicit
examples of how other people had dealt with the topic.  I'd say we've
beaten the former into the ground (as usual) but never touched the
latter.

~Brad

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;160198600;22374440;w

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:295611
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to