djr33
07-31-2007, 07:28 PM
I'm just curious about this.
Is there a way that one could code javascript on a page that would disable any other javascript?
If so, then it would be possible to let people enter html directly in a page, rather than having to process it first and make sure there is no XSS, etc.
Then again, it's probably easier to just use a server side language and escape it. I'm just wondering.
Is there a way that one could code javascript on a page that would disable any other javascript?
If so, then it would be possible to let people enter html directly in a page, rather than having to process it first and make sure there is no XSS, etc.
Then again, it's probably easier to just use a server side language and escape it. I'm just wondering.