thank you for last replay.
so the .JS client post the escape html content (an advertisement content)
to asp.net server side.
the server store the content in xxx1.txt file,
the CAJA spouse to get the text from xxx1.txt and load it to guest.
the way i make the call from caja to the .txt is having the same file name,
so xxx1.html (with caja) call xxx1.txt (on same path)
caja.load(document.getElementById('guest'), undefined,
function(frame) {
frame.code(document.location.href.replace(/\.[^/.]+$/, ".txt"),
'text/html')
.run();
});
ad-Right-1-10500840416-180x700.html
ad-Right-1-10500840416-180x700.txt
---------------------------------------------------------------
so at the moment i unescape from the server... rusher then on client, as
well i havent checked if caja filter escape content.. (case unescape it
after caja run...)
On Monday, May 1, 2017 at 11:35:48 PM UTC+7, Kevin Reid wrote:
>
> On Sun, Apr 30, 2017 at 10:11 PM, o x <[email protected] <javascript:>>
> wrote:
>
>> how to unescape the content [for] guest before run?
>> i stored the content in escape string data and Caja load that content at
>> it is.
>> i wounder how to unescape the text content before Caja sanitize the text.
>>
>
> Could you explain what type of escaping you mean and why you want Caja to
> do it rather than doing it yourself before passing the string to Caja?
>
--
---
You received this message because you are subscribed to the Google Groups
"Google Caja Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.