This is perhaps my favourite quirk from HTML spec which is, in fact, mentioned directly in the spec: https://www.w3.org/TR/html50/scripting-1.html#restrictions-for-contents-of-script-elements …pic.twitter.com/1y0EAnq7u3
Ok let's close the script. That can't possibly work right? <script> x = '<!--<script>' </script>/-alert(1) </script>
-
-
- Još 1 odgovor
Novi razgovor -
-
-
Do I see a regex here? 0_o
-
Haha you might do sir
- Još 5 drugih odgovora
Novi razgovor -
-
-
On one line is easier to understand: <script> x = '<!--<script>' < /script>/ - alert(1) </script> A string less than (a regex minus undefined returned by alert(1)) A string less than NaN x = false PS: check JavaScript's Automatic Semicolon Insertion http://www.bradoncode.com/blog/2015/08/26/javascript-semi-colon-insertion/ …
-
In order to show the mentioned legacy quirk, semicolons has to be explicitly used.
- Još 2 druga odgovora
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.