On Mar 9, 2008, at 7:45 AM, liorean wrote:

> How about javascript: urls; javascript in data: urls; javascript from
> eval, setTimeout with string, setInterval with string, Function
> constructor; javascript written directly into the page using DOM;
> javascript written directly into the page using innerHTML?

All excellent "hard cases", and not as uncommon as you might think. See

https://bugzilla.mozilla.org/show_bug.cgi?id=307984

/be
_______________________________________________
Es4-discuss mailing list
[email protected]
https://mail.mozilla.org/listinfo/es4-discuss

Reply via email to