Beefy Boxes and Bandwidth Generously Provided by pair Networks
laziness, impatience, and hubris
 
PerlMonks  

Re: Re: Re: Template-output quoting (Warning: Contains JavaScript)

by tachyon (Chancellor)
on Dec 11, 2002 at 11:19 UTC ( #219060=note: print w/replies, xml ) Need Help??


in reply to Re: Re: Template-output quoting (Warning: Contains JavaScript)
in thread Template-output quoting (Warning: Contains JavaScript)

From what you are saying the way that the templating system is working is to arbirarily insert vars into the HTML as a pre-process. As such it can arbitrarily break your javascript before it can run. In this case by far the easiest solution, in fact probably the only solution will be to attack the source and send correctly escaped strings s/([^\w])/\\$1/g;

The only other possible solution that occurs to me is trick the javascript thusly (pseudo code)

<script> /* <VAR1> $var1 </VAR1> <VAR2> $var2 </VAR2> */ // now provided $var1 and $var2 did not contain the */ sequence // we should have all their values in pseudo XML within our // script. so now all we need to do is read the comment // somehow (don't know how but document.me.content.value or some // such probably holds the entire HTML text) and then use some regex // magic to extract the values we want // begin magic... </script>

We trick the javacript to thinking that

cheers

tachyon

s&&rsenoyhcatreve&&&s&n.+t&"$'$`$\"$\&"&ee&&y&srve&&d&&print

Replies are listed 'Best First'.
Re: Re: Re: Re: Template-output quoting (Warning: Contains JavaScript)
by perlcgi (Hermit) on Dec 11, 2002 at 12:49 UTC
    Wow!
    Absolutely great idea, tachyon. Thank you! This is exactly the type of solution I was looking for.
    You are thinking outside the box!
    Wicked!
     xp++
    Take care in those flying machines,
    perlcgi.

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://219060]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others surveying the Monastery: (4)
As of 2023-02-08 03:03 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?
    I prefer not to run the latest version of Perl because:







    Results (40 votes). Check out past polls.

    Notices?