Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.javascript > #36087
| Newsgroups | comp.lang.javascript |
|---|---|
| Subject | Re: comp.lang.javascript |
| From | "Evertjan." <exxjxw.hannivoort@inter.nl.net> |
| References | <a55b1b44-f092-4d31-831d-5ebdbd3a75ea@googlegroups.com> <XnsAA097AC5E575Eeejj99@194.109.6.166> <400698fc-c99d-460f-8947-3db8ab6c860b@googlegroups.com> |
| Date | 2019-03-05 21:49 +0100 |
| Message-ID | <XnsAA09DDFE31CBCeejj99@194.109.6.166> (permalink) |
dr.j.r.stockton@gmail.com wrote on 05 Mar 2019 in comp.lang.javascript: > On Tuesday, 5 March 2019 11:04:45 UTC, Evertjan. wrote: > >> A webpage is not something where one can insert something in ... > > Not necessarily not. For example, if the Web page contains a > Button which causes 'eval' of the contents of an editable > Textarea, then the user can, as far as I can see (and tested > locally) insert into the displayed page anything which can > be expressed in JavaScript in a Textarea. > > I just performed thusly, as a test, > Divn.innerHTML = "RHUBARB<br>...<br>" + document.body.innerHTML > inserting a copy of the body in the body (without its CSS and with > non-working script). Windows 10, current Firefox. > > And, in my translation of the first two chapters of Lagrange's > famous paper, which worked on the Web, I execute something like > BODY = BODY.replace(RegExp, String) ; //. > > So it appears that a suitably-coded Web page can be altered to > whatever a browser can show. Certainly John, yes, that "something" was sloppy of me, I ment "some serverside code", as the web-page only exists in the browser. -- Evertjan. The Netherlands. (Please change the x'es to dots in my emailaddress)
Back to comp.lang.javascript | Previous | Next — Previous in thread | Find similar | Unroll thread
comp.lang.javascript Sabapathi Ramachandiran <sabapathiramachandiran@gmail.com> - 2019-03-05 01:47 -0800
Re: comp.lang.javascript "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2019-03-05 12:04 +0100
Re: comp.lang.javascript John G Harris <niam@jghnorth.org.uk.invalid> - 2019-03-05 18:23 +0000
Re: comp.lang.javascript "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2019-03-05 19:43 +0100
Re: comp.lang.javascript dr.j.r.stockton@gmail.com - 2019-03-05 12:26 -0800
Re: comp.lang.javascript "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2019-03-05 21:49 +0100
csiph-web