Path: csiph.com!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!newsreader4.netcologne.de!news.netcologne.de!newsfeed.arcor.de!newsspool2.arcor-online.net!news.arcor.de.POSTED!not-for-mail
Content-Type: text/plain; charset="UTF-8"
Message-ID: <2605981.XCImaMMTPp@PointedEars.de>
From: Thomas 'PointedEars' Lahn <PointedEars@web.de>
Reply-To: Thomas 'PointedEars' Lahn <usenet@PointedEars.de>
Organization: PointedEars Software (PES)
Date: Mon, 11 Feb 2013 01:49:58 +0100
User-Agent: KNode/4.8.5
Content-Transfer-Encoding: 8Bit
X-Face: %i>XG-yXR'\"2P/C_aO%~;2o~?g0pPKmbOw^=NT`tprDEf++D.m7"}HW6.#=U:?2GGctkL,f89@H46O$ASoW&?s}.k+&.<b';Md8`dH6iqhT)6C^.Px|[=M@7=Ik[_w<%n1Up"LPQNu2m8|L!/3iby{-]A+#YE}Kl{Cw$\U!kD%K}\2jz"QQP6Uqr],./"?;=4v
Face: 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
Subject: Re: Script in <a  > tag in IE
Newsgroups: comp.lang.javascript
References: <urv7h8lmmckcjes30rk61nippagpq7el9l@4ax.com> <kf689p$sok$1@speranza.aioe.org> <2542700.24A3Wqytjl@PointedEars.de> <kf6nfe$6lu$1@speranza.aioe.org> <8809769.VO6lmAGIsZ@PointedEars.de> <kf6p3g$acq$1@speranza.aioe.org> <2710705.sg4g0aCLjx@PointedEars.de> <kf6qf9$dej$1@speranza.aioe.org> <1522652.FLkxLQDhY3@PointedEars.de> <kf8svv$sil$1@speranza.aioe.org> <1573878.qxiknB9TEh@PointedEars.de> <kf952n$ned$1@speranza.aioe.org> <m2ehgng40l.fsf@nntp.bednarz.nl> <kf9bb1$crh$1@speranza.aioe.org> <m21ucng0wh.fsf@nntp.bednarz.nl>
MIME-Version: 1.0
Lines: 55
NNTP-Posting-Date: 11 Feb 2013 01:49:59 CET
NNTP-Posting-Host: c095950a.newsspool1.arcor-online.net
X-Trace: DXC=En[?Aj:NFYh:i=48;n?Z:`ic==]BZ:afn4Fo<]lROoRankgeX?EC@@`\BGGOn[Md>hDZm8W4\YJNlb@mF9jNikde3>YBYU3JEomEONnMW=ZYhi
X-Complaints-To: usenet-abuse@arcor.de
Xref: csiph.com comp.lang.javascript:18448

Eric Bednarz wrote:

> Cezary Tomczyk <cezary.tomczyk@gmail.com> writes:
>> W dniu 2013-02-11 00:09, Eric Bednarz pisze:
>>> Newsflash: event attribute value literals are *not* eval'ed. This BS
>>> theory just seems to keep coming back like a bad song whenever
>>> arguments, common sense and experience are exhausted.
>> I thought that the code is eval'ed :/
> 
> | <ul>
> |     <li onclick="var quux; alert(delete quux);">Foo</li>
> |     <li id="bar">Bar</li>
> | </ul>
> |  
> | <script>
> |     document.getElementById('bar').onclick = function () {
> |         eval("var quux; alert(delete quux);");
> |     };
> | </script>

Not that I doubt your conclusions (they are the same as mine), but what 
exactly is this code supposed to prove?

(BTW, please do not use quoting marks with code that is to be tested.  TIA.)
 
>> Ok, this source provides more consistent information:
>> http://www.w3.org/html/wg/drafts/html/master/webappapis.html#event-
handler-content-attributes
>>
>> "7. Set up the script's global object [...]" + "This is typically a
>> Window object. In JavaScript, this corresponds to the global object."
>> (http://www.w3.org/html/wg/drafts/html/master/webappapis.html#script%27s-
global-object)
>>
>> If I understood it correctly the code inside event-handler attribute
>> is executed in global context, right?
> 
> What do you mean by 'context'? The execution context of the function
> body specified with an event attribute literal is the function object

I do not think that “event attribute literal” is proper terminology.
Try “event-handler attribute value” instead.

> that it creates.

An actual object cannot be the abstract entity that is an execution context.  
Probably you meant to say that if and when the function is called, execution 
enters that function's local context (as opposed to the global execution 
context).

-- 
PointedEars

Twitter: @PointedEars2
Please do not Cc: me. / Bitte keine Kopien per E-Mail.