On Tue, Mar 15, 2016 at 9:38 PM, Nova Tan <[email protected]> wrote:
> Thanks for the response, sorry I only saw it today. I tried the snippet
> you posted as well but couldn't get it to work. Basically I used the
> snippet below:
> caja.load(document.getElementById('some-iframe').contentWindow.document,
> uriPolicy, function(frame) {
> frame.code('http://localhost:8080/bla.js',
> 'application/javascript').run();
> });
>
> With the same javascript response:
> document.writeln("<SCRIPT language='JavaScript1.1' SRC=\"
> https://ad.doubleclick.net/some-ad\";>");
> document.writeln("</SCRIPT>");
>
> I get this error: Uncaught script error: Uncaught Error: shouldn't happen:
> start tag <script...> while in text insertion mode for SCRIPT in source: "
> http://localhost:8080/bla.js";
>
I haven't reminded myself of the exact details, but Caja has limitations in
its support for document.write and I think you are hitting one of them by
putting the <script> and </script> in separate calls.
If the guest content is under your control, I recommend not using
document.write — it is generally considered to be unwise in modern web
development due to its performance impact and semantic gotchas, and all of
its uses can be replaced with DOM node manipulation.
--
---
You received this message because you are subscribed to the Google Groups
"Google Caja Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
