TIP: Keep javascript document.write out of your form posts. |
[eluser]MrBaseball34[/eluser]
Found on Experts-Exchange: To keep javascript injections out of your form posts. If you're not using document.write yourself (why would you?) you can do this at the very top of your documents (or as soon as possible): <script>document.write = document.writeln = function(){};</script> This will make document.write/ln do absolutely nothing! Ha ha ha! Or, if you need to use document.write, do this instead: <script> document.myWrite = document.writeln; document.write = document.writeln = function(){}; document.myWrite('See!') </script> |
Messages In This Thread |
TIP: Keep javascript document.write out of your form posts. - by El Forum - 02-26-2008, 09:13 AM
TIP: Keep javascript document.write out of your form posts. - by El Forum - 02-26-2008, 09:15 AM
TIP: Keep javascript document.write out of your form posts. - by El Forum - 02-26-2008, 09:41 AM
|