"VK" <> writes:
> There is also a native (means common for all JavaScript/JScript
> implementations)
That's a broad sweep
> model failure exploit which allows you to do things like:
> (Google news swallows the backslashes, so instead of a real one I'm
> using [backslash] marker)
>
> var str = "[backslash]
> hhhhhhhhhhhhhhhhhhhhhh[backslash]
> uuuuuuuuuuuuuuuuuuuuuu[backslash]
> gggggggggggggggggggggg[backslash]
> eeeeeeeeeeeeeeeeeeeeee";
While it might work in most Javascript implementations, what it means
is different. In some browsers, the "backslash newline" is not in the
resulting string (e.g., IE, Opera and Mozilla), in others the newline
itself is escaped and occurs in the string (e.g., Netscape 4).
/L
--
Lasse Reichstein Nielsen -
DHTML Death Colors: <URL:http://www.infimum.dk/HTML/rasterTriangleDOM.html>
'Faith without judgement merely degrades the spirit divine.'