But the only doc.write in either version of computeScriptBase is clearly a
string literal, not an injection worry. Perhaps tha was generated by
something else.
// If the user renamed their script tag, we'll use a fancier method to find
// it. Note that this will not work in the Late Loading case due to the
// document.write call.
if (!thisScript) {
// Put in a marker script element which should be the first script tag after
// the tag we're looking for. To find it, we start at the marker and walk
// backwards until we find a script.
var markerId = "__gwt_marker___MODULE_NAME__";
var markerScript;
$doc.write('<script id="' + markerId + '"></script>');
markerScript = $doc.getElementById(markerId);
thisScript = markerScript && markerScript.previousSibling;
while (thisScript && thisScript.tagName != 'SCRIPT') {
thisScript = thisScript.previousSibling;
}
}
--
You received this message because you are subscribed to the Google Groups
"Google Web Toolkit" group.
To view this discussion on the web visit
https://groups.google.com/d/msg/google-web-toolkit/-/xMGMfQPgRFoJ.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/google-web-toolkit?hl=en.
