I know that there are many Javascript libraries that use Javascript to
load additional remote Javascript.  In fact 5 years ago I wrote a
library to not only to do that but to do lazy loading of the
Javascript as it was needed.


After getting this all to work I stopped development and have never
used it in production code.  I realized that what I was doing opened
huge security holes for cross site scripting attacks.

I avoid using such libraries that use Javascript for this reason.

Can you load Javascript via AJAX and get it to run?  Yes.  It isn't
even hard.

Should you???????

I say no.  It is too insecure.


Lee

On May 14, 6:14 am, skip <[email protected]> wrote:
> A number of folks have asked how to make javascript execute inside
> fragments which are loaded by Ajax such as is done by the iui
> toolkit.  An old stale thread refers to 
> this.http://groups.google.com/group/iphonewebdev/browse_thread/thread/f4ca...
>
> We do this routinely and have received several requests for public
> URLs to see samples.  Unfortunately our servers are all behind a
> pretty tight firewall but I have prepared a package which is just a
> small modification of the original iui demo sample package and which
> shows the js execution in action.  The zip file is about 400K and if
> anyone wants to host the demo or just receive the package leave a note
> on this forum and I will mail it to them.
>
> Skip
>
> --
> You received this message because you are subscribed to the Google Groups 
> "iPhoneWebDev" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to 
> [email protected].
> For more options, visit this group 
> athttp://groups.google.com/group/iphonewebdev?hl=en.

-- 
You received this message because you are subscribed to the Google Groups 
"iPhoneWebDev" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/iphonewebdev?hl=en.

Reply via email to