How to make injected js execute?

68 Message(s) by 9 Author(s) originally posted in javascript

From: Jon Maz

Date: Sunday, August 19, 2007

Hi,

I have got a simple bit

<unit> (b) {binary} digit.

	The unit of information; the amount of information obtained by
	asking a yes-or-no question; a computational quantity that can
	take on one of two values, such as false and true or 0 and 1;
	the smallest unit of storage - sufficient to hold one bit.

	A bit is said to be "set" if its value is true or 1, and
	"reset" or "clear" if its value is false or 0.  One speaks of
	setting and clearing bits.  To {toggle} or "invert" a bit is
	to change it, either from 0 to 1 or from 1 to 0.

	The term "bit" first appeared in print in the computer-science
	sense in 1949, and seems to have been coined by the eminent
	statistician, {John Tukey}.  Tukey records that it evolved
	over a lunch table as a handier alternative to "bigit" or
	"binit".

	See also {flag}, {trit}, {mode bit}, {byte}, {word}.

	[{Jargon File}]

	(2002-01-22)

of code

<software> Instructions for a computer in some programming
	language, often {machine language}.  The word "code" is often
	used to distinguish instructions from {data} (e.g. "The code
	is marked 'read-only'") whereas "{software}" is used in
	contrast with "{hardware}" and may consist of more than just
	code.

	(2000-04-08)

that successfully injects a JAVAscript alert

<operating system> /*'l*rt/ An audible and/or visual message
	intended to inform a system's users or administrators about a
	change in the operating conditions of that system or about
	some kind of error condition.  In a {graphical user
	interface}, an alert would typically be displayed as a small
	window containing the message and a button to click to dismiss
	the window.

	(1999-03-29)

into the DOM

<hypertext, language, World-Wide Web> A {W3C} specification
	for {application program interfaces} for accessing the content
	of {HTML} and {XML} documents.

	{Home (http://www.w3.org/DOM/)}.

	(1999-12-14)

(confirmed by View Generated Source in Firefox

<World-Wide Web> A complete {free}, {open-source} {web
	browser} from the {Mozilla Foundation} and therefore a true
	code descendent of {Netscape Navigator}.  The first non-{beta
	release} was in late 2004.

	{Firefox Home (http://www.mozilla.org/products/firefox)}.

	(2005-01-26)

), yet that alert
isn't execute

<operating system, programming> The process of carrying out
	the {instructions} in a computer program by a computer.

	See also {dry run}.

	(1996-05-13)

d.

QUESTION: Why does not it execute?
QUESTION: Can I make it execute?

<html>
<body>

<div id="myDiv"></div>

<script>
var myDiv = document

1. <application> Any specific type of {file} produced or
	edited by a specific {application}; usually capable of being
	printed.  E.g. "Word document", "Photoshop document", etc.

	2. <hypertext> A term used on some systems (e.g. {Intermedia})
	for a {hypertext} {node}.  It is sometimes used for a
	collection of nodes on related topics, possibly stored or
	distributed as one.

	3. <programming> To write {documentation} on a certain piece
	of code.

	(2003-10-25)

.getElementById("myDiv");
myDiv.innerHTML = "\<script\>alert('foo

<jargon> /foo/ A sample name for absolutely anything,
	especially programs and files (especially {scratch files}).
	First on the standard list of {metasyntactic variables} used
	in {syntax} examples.  See also {bar}, {baz}, {qux}, {quux},
	{corge}, {grault}, {garply}, {waldo}, {fred}, {plugh},
	{xyzzy}, {thud}.

	The etymology of "foo" is obscure.  When used in connection
	with "bar" it is generally traced to the WWII-era Army slang
	acronym {FUBAR}, later bowdlerised to {foobar}.

	However, the use of the word "foo" itself has more complicated
	antecedents, including a long history in comic strips and
	cartoons.

	"FOO" often appeared in the "Smokey Stover" comic strip by
	Bill Holman.  This surrealist strip about a fireman appeared
	in various American comics including "Everybody's" between
	about 1930 and 1952.  FOO was often included on licence plates
	of cars and in nonsense sayings in the background of some
	frames such as "He who foos last foos best" or "Many smoke but
	foo men chew".

	Allegedly, "FOO" and "BAR" also occurred in Walt Kelly's
	"Pogo" strips.  In the 1938 cartoon "The Daffy Doc", a very
	early version of Daffy Duck holds up a sign saying "SILENCE IS
	FOO!".  Oddly, this seems to refer to some approving or
	positive affirmative use of foo.  It has been suggested that
	this might be related to the Chinese word "fu" (sometimes
	transliterated "foo"), which can mean "happiness" when spoken
	with the proper tone (the lion-dog guardians flanking the
	steps of many Chinese restaurants are properly called "fu
	dogs").

	Earlier versions of this entry suggested the possibility that
	hacker usage actually sprang from "FOO, Lampoons and Parody",
	the title of a comic book first issued in September 1958, a
	joint project of Charles and Robert Crumb.  Though Robert
	Crumb (then in his mid-teens) later became one of the most
	important and influential artists in underground comics, this
	venture was hardly a success; indeed, the brothers later
	burned most of the existing copies in disgust.  The title FOO
	was featured in large letters on the front cover.  However,
	very few copies of this comic actually circulated, and
	students of Crumb's "oeuvre" have established that this title
	was a reference to the earlier Smokey Stover comics.

	An old-time member reports that in the 1959 "Dictionary of the
	TMRC Language", compiled at {TMRC} there was an entry that
	went something like this:

	FOO: The first syllable of the sacred chant phrase "FOO MANE
	PADME HUM."  Our first obligation is to keep the foo counters
	turning.

	For more about the legendary foo counters, see {TMRC}.  Almost
	the entire staff of what became the {MIT} {AI LAB} was
	involved with TMRC, and probably picked the word up there.

	Another correspondant cites the nautical construction
	"foo-foo" (or "poo-poo"), used to refer to something
	effeminate or some technical thing whose name has been
	forgotten, e.g. "foo-foo box", "foo-foo valve".  This was
	common on ships by the early nineteenth century.

	Very probably, hackish "foo" had no single origin and derives
	through all these channels from Yiddish "feh" and/or English
	"fooey".

	[{Jargon File}]

	(1998-04-16)

');\</script\>";
</script>

</body>
</html>

Thanks in advance,

JON

From: Peter Michaux

Date: Sunday, August 19, 2007

wrote in message

In {object-oriented programming} sending a message to an
	{object} (to invoke a {method}) is equivalent to calling a
	{procedure} in traditional programming languages, except that
	the actual code executed may only be selected at run time
	depending on the {class} of the object.  Thus, in response to
	the message "drawSelf", the method code invoked would be
	different if the target object were a circle or a square.

	(1995-02-16)

Hi,
I have got a simple bit of code that successfully injects a JAVAscript alert
into the DOM (confirmed by View Generated Source in Firefox), yet that alert
isn't executed.
QUESTION: Why does not it execute?
QUESTION: Can I make it execute?
<html>
<body>
<div id="myDiv"></div>
<script>
var myDiv = document.getElementById("myDiv");
myDiv.innerHTML = "\<script\>alert('foo');\</script\>";
</script>
</body>
</html>
Thanks in advance,
JON

This issue is not as easy as it seems it should be. Randy Webb has
looked into this in great detail. There was a recent thread

1. See {multithreading}.

	2. See {threaded code}.

	3. {topic thread}.

	[{Jargon File}]

...

<URL

<World-Wide Web> (URL, previously "Universal") A {standard}
	way of specifying the location of an object, typically a {web
	page}, on the {Internet}.  Other types of object are described
	below.  URLs are the form of address used on the {World-Wide
	Web}.  They are used in {HTML} documents to specify the target
	of a {hyperlink} which is often another HTML document
	(possibly stored on another computer).

	Here are some example URLs:

	 http://www.w3.org/default.html
	 http://www.acme.co.uk:8080/images/map.gif
	 http://www.foldoc.org/?Uniform+Resource+Locator
	 http://www.w3.org/default.html#Introduction
	 ftp://wuarchive.wustl.edu/mirrors/msdos/graphics/gifkit.zip
	 ftp://spy:secret@ftp.acme.com/pub/topsecret/weapon.tgz
	 mailto:fred@doc.ic.ac.uk
	 news:alt.hypertext
	 telnet://dra.com

	The part before the first colon specifies the access scheme or
	{protocol}.  Commonly implemented schemes include: {ftp},
	{http} (World-Wide Web), {gopher} or {WAIS}.  The "file"
	scheme should only be used to refer to a file on the same
	host.  Other less commonly used schemes include {news},
	{telnet} or mailto ({e-mail}).

	The part after the colon is interpreted according to the
	access scheme.  In general, two slashes after the colon
	introduce a {hostname} (host:port is also valid, or for {FTP}
	user:passwd@host or user@host).  The {port} number is usually
	omitted and defaults to the standard port for the scheme,
	e.g. port 80 for HTTP.

	For an HTTP or FTP URL the next part is a {pathname} which is
	usually related to the pathname of a file on the server.  The
	file can contain any type of data but only certain types are
	interpreted directly by most {browsers}.  These include {HTML}
	and images in {gif} or {jpeg} format.  The file's type is
	given by a {MIME} type in the HTTP headers returned by the
	server, e.g. "text/html", "image/gif", and is usually also
	indicated by its {filename extension}.  A file whose type is
	not recognised directly by the browser may be passed to an
	external "viewer" {application}, e.g. a sound player.

	The last (optional) part of the URL may be a query string
	preceded by "?" or a "fragment identifier" preceded by "#".
	The later indicates a particular position within the specified
	document.

	Only alphanumerics, reserved characters (:/?#"<>%+) used for
	their reserved purposes and "$", "-", "_", ".", "&", "+" are
	safe and may be transmitted unencoded.  Other characters are
	encoded as a "%" followed by two {hexadecimal} digits.  Space
	may also be encoded as "+".  Standard {SGML} "&<name>;"
	character entity encodings (e.g. "&eacute;") are also accepted
	when URLs are embedded in HTML.  The terminating semicolon may
	be omitted if &<name> is followed by a non-letter character.

	{The authoritative W3C URL specification
	(http://www.w3.org/hypertext/WWW/Addressing/Addressing.html)}.

	(2000-02-17)

:
http://group

A group G is a non-empty {set} upon which a {binary} operator
	* is defined with the following properties for all a,b,c in G:

	  Closure:     G is closed under *,  a*b in G
	  Associative: * is associative on G, (a*b)*c = a*(b*c)
	  Identity:    There is an identity element  e  such that
		       a*e = e*a = a.
	  Inverse:     Every element has a unique inverse a' such that
		       a * a' = a' * a = e.  The inverse is usually
		       written with a superscript -1.

	(1998-10-03)

s.google.com/group/comp.lang.JAVAscript/browse_frm/thread/fcb50a7c0a2c7fab/9adffa2527da0f51?lnk=gst&q=script+insertion+revisited&rnum=1#9adffa2527da0f51>

Peter

From: Jon Maz

Date: Monday, August 20, 2007

Hi Peter,

Thanks for that - I had no idea this'd be a complex issue. A couple of
observations:

1. for (possibly demented) reasons of my own it's actually an arbitrary mix
of js and html that I want to inject into the page, so of the 5 method

<programming> The name given in {Smalltalk} and other
	{object-oriented languages} to a procedure or routine
	associated with one or more {classes}.  An {object} of a
	certain class knows how to perform actions, e.g. printing
	itself or creating a new instance of itself, rather than the
	function (e.g. printing) knowing how to handle different types
	of object.

	Different classes may define methods with the same name
	(i.e. methods may be {polymorphic}).  The term "method" is used
	both for a named operation, e.g. "PRINT" and also for the code
	which a specific class provides to perform tha
	t operation.

	Most methods operate on objects that are instances of a
	certain class.  Some object-oriented languages call these
	"object methods" to distinguish then from "{class methods}".

	In {Smalltalk}, a method is defined by giving its name,
	documentation, temporary local variables and a sequence of
	expressions separated by "."s.

	(2000-03-22)

s
offered in the other thread:

* Change Source- attempts to change the .src property of a script element

1. <data, programming> One of the items of data in an {array}.

	2. <language, text> One kind of node in an {SGML}, {HTML}, or
	{XML} {document} {tree}.  An SGML element is typically
	represented by a start {tag} ("<p>") and an end tag ("</p>").
	In some SGML implementations, some tags are omissible, as with
	"</p>" in {HTML}.

	The start tag can contain {attributes} ("<p lang="en-UK"
	class='stuff'>"), which are an unordered set of key-value
	bindings for that element.  Both the start tag and end tag for
	an element typically contain the "tag name" (also called the
	"{GI}" or generic identifier) for that element.

	In {XML}, an element is always represented either by an
	explicit start tag and end tag, or by an empty element tag
	("<img src='thing.{png}' alt='a dodad' />").

	Other kinds of SGML node are: a section of character data
	("foo"), a comment ("<!-- bar -->"), a markup declaration
	("<!ENTITY reg CDATA '&#174'>"), or a processing instruction
	("<?xml-stylesheet href="shop-english.xsl" type="text/xsl"
	?>").

	(2001-01-30)

.
* Change innerHMTL - inserts a script string

<programming> A sequence of {data} values, usually {bytes},
	which usually stand for {characters} (a "character string").
	The {mapping} between values and characters is determined by
	the {character set} which is itself specified implcitly or
	explicitly by the environment in which the string is being
	interpreted.

	The most common character set is {ASCII} but, since the late
	1990s, there has been increased interest in larger character
	sets such as {Unicode} where each character is represented by
	more than eight {bits}.

	Most programming languages consider strings (e.g.
	"124:shabooya:\n", "hello world") basically distinct from
	numbers which are typically stored in fixed-length {binary} or
	{floating-point} representation.

	A {bit string} is a sequence of {bits}.

	(1999-12-21)

via innerHTML.
* createElement - uses createElement to create a script block

1. <unit> A unit of data or memory, often, but not
	exclusively, on a {magnetic disk} or {magnetic tape}.

	Compare {record}, {sector}.

	(2000-07-17)

	2. <operating system> To delay or sit idle while waiting for
	something.

	Compare {busy-wait}.

	(2000-07-17)

	3. <programming> A delimited section of {source code} in a
	{block-structured} language.

	(2004-09-29)

with a .src
attribute

<data> A named value or relationship that exists for some or
	all {instances} of some {entity} and is directly associated
	with that instance.

	Examples include the {href} attribute of an {HTML} {anchor}
	element, the columns of a database table considered as
	attributes of each row, and the {members} ({properties} and
	{methods} of an {object} in {OOP}.  This contrasts with the
	contents of some kind of container (e.g. an array), which are
	typically not named.  The contents of an {associative array},
	though they might be considered to be named by their key
	values, are not normally thought of as attributes.

	(2001-02-04)

.
* Change .text

1. Executable code, especially a "pure code" portion shared
	between multiple instances of a program running in a
	{multitasking} {operating system}.

	Compare {English}.

	2. Textual material in the mainstream sense; data in ordinary
	{ASCII} or {EBCDIC} representation (see {flat ASCII}).  "Those
	are text files; you can review them using the editor."

	These two contradictory senses confuse hackers too.

	[{Jargon File}]

	(1995-03-16)

- changes the .text property of a script element.
* createTextNode - creates the text part of a script element using
createTextNode

... I think only the .innerHTML one is an option

<software> (Or "option", "flag", "switch", "option switch") An
	argument to a command that modifies its function rather than
	providing data.  Options generally start with "-" in {Unix} or
	"/" in {MS-DOS}.  This is usually followed by a single letter
	or occasionally a digit.

	Some commands require each option to be a separate argument,
	introduced by a new "-" or "/", others allow multiple option
	letters to be concatenated into a single argument with a
	single "-" or "/", e.g. "ls -al".  A few Unix commands
	(e.g. {ar}, {tar}) allow the "-" to be omitted.  Some options
	may or must be followed by a value, e.g. "cc prog.c -o prog",
	sometimes with and sometimes without an intervening space.

	{getopt} and {getopts} are commands for parsing command line
	options.  There is also a {C} library routine called getopt
	for the same purpose.

	(1996-12-11)

for me.

2. A lot of the thread you referred me to is about IE, whereas my observed
issue affects Firefox too.

My fingers are still crossed that there's an answer to this for me, but hope
is ebbing away fast...

Cheers,

JON

From: Peter Michaux

Date: Monday, August 20, 2007

wrote in message:

1. for (possibly demented) reasons of my own it's actually an arbitrary mix
of js and html that I want to inject into the page, so of the 5 methods
offered in the other thread:
* Change Source- attempts to change the .src property of a script element.
* Change innerHMTL - inserts a script string via innerHTML.
* createElement - uses createElement to create a script block with a .src
attribute.
* Change .text - changes the .text property of a script element.
* createTextNode - creates the text part of a script element using
createTextNode
... I think only the .innerHTML one is an option for me.
2. A lot of the thread you referred me to is about IE, whereas my observed
issue affects Firefox too.
My fingers are still crossed that there's an answer to this for me, but hope
wrote in message a library
<programming, library> A collection of {subroutines} and
	{functions} stored in one or more files, usually in compiled
	form, for linking with other programs.  Libraries are one of
	the earliest forms of organised {code reuse}.  They are often
	supplied by the {operating system} or {software development
	environment} developer to be used in many different programs.
	The routines in a library may be general purpose or designed
	for some specific function such as three dimensional animated
	graphics.

	Libraries are linked with the user's program to form a
	complete {executable}.  The linking may be {static linking}
	or, in some systems, {dynamic linking}.

	(1998-11-21)
that does what you want to do...sort
1. <application, algorithm> To arrange a collection of items
	in some specified order.  The items - {records} in a file or
	data structures in memory - consist of one or more {fields} or
	members.  One of these fields is designated as the "sort key"
	which means the records will be ordered according to the value
	of that field.  Sometimes a sequence of key fields is
	specified such that if all earlier keys are equal then the
	later keys will be compared.  Within each field some ordering
	is imposed, e.g. ascending or descending numerical, {lexical
	ordering}, or date.

	Sorting is the subject of a great deal of study since it is a
	common operation which can consume a lot of computer time.
	There are many well-known sorting {algorithms} with different
	time and space behaviour and programming {complexity}.

	Examples are {quicksort}, {insertion sort}, {bubble sort},
	{heap sort}, and {tree sort}.  These employ many different
	data structures to store sorted data, such as {arrays},
	{linked lists}, and {binary trees}.

	2. <tool> The {Unix} utility program for sorting lines of
	files.

	{Unix manual page}: sort(1).

	(1997-02-12)
of.

<URL: http://forkJAVAscript.org/mutate/docs>

What my script does it scan through the HTML

<hypertext, World-Wide Web, standard> (HTML) A {hypertext}
	document format used on the {World-Wide Web}.  HTML is built
	on top of {SGML}.  "Tags" are embedded in the text.  A tag
	consists of a "<", a "directive" (in lower case), zero or
	more parameters and a ">".  Matched pairs of directives, like
	"<title>" and "</title>" are used to delimit text which is to
	appear in a special place or style.

	Links to other documents are in the form

	 <a href="http://machine.edu/subdir/file.html">foo</a>

	where "<a>" and "</a>" delimit an "anchor", "href" introduces
	a hypertext reference, which is most often a {Uniform Resource
	Locator} (URL) (the string in double quotes in the example
	above).  The link will be represented in the browser by the
	text "foo" (typically shown underlined and in a different
	colour).

	A certain place within an HTML document can be marked with a
	named anchor, e.g.:

	 <a name="baz">

	The "fragment identifier", "baz", can be used in an href by
	appending "#baz" to the document name.

	Other common tags include <p> for a new paragraph, <b>..</b>
	for bold text, <ul> for an unnumbered list, <pre> for
	preformated text, <h1>, <h2> .. <h6> for headings.

	{HTML} supports some standard {SGML} {national characters} and
	other non-{ASCII} characters through special {escape
	sequences}, e.g. "&eacute;" for a lower case 'e' with an acute
	accent.  You can sometimes get away without the terminating
	semicolon but it's bad style.

	Most systems will ignore the case of tags and attributes but
	lower case should be used for compatibility with {XHTML}.

	The {World-Wide Web Consortium} (W3C) is the international
	{standards} body for HTML.

	Latest version: {XHTML} 1.0, as of 2000-09-10.

	{Home (http://www.w3.org/MarkUp/)}.

	{Character escape sequences
	(http://www.w3.org/hypertext/WWW/MarkUp/ISOlat1.html)}.

	See also {weblint}.

	(2006-01-19)

that is about to be
inserted and pluck out all the script bits. It inserts the other HTML
and then process

1. <operating system, software> The sequence of states of an
	executing {program}.  A process consists of the program {code}
	(which may be shared with other processes which are executing
	the same program), private data, and the state of the
	{processor}, particularly the values in its {registers}.  It
	may have other associated resources such as a {process
	identifier}, open files, {CPU time} limits, {shared memory},
	{child processes}, and {signal handlers}.

	One process may, on some {platforms}, consist of many
	{threads}.  A {multitasking} {operating system} can run
	multiple processes {concurrently} or in {parallel}, and allows
	a process to spawn "child" processes.

	(2001-06-16)

	2. <business> The sequence of activities, people, and systems
	involved in carrying out some business or achieving some
	desired result.  E.g. software development process, project
	management process, configuration management process.

	(2001-06-16)

the JAVAScript bits. Instead of dynamic script
insertion, as Randy has investigated, I just eval() the script bits.
This is more cross-browser

<hypertext> A program which allows a person to read
	{hypertext}.  The browser gives some means of viewing the
	contents of {nodes} (or "pages") and of {navigating} from one
	node to another.

	{Netscape Navigator}, {NCSA} {Mosaic}, {Lynx}, and {W3} are
	examples for browsers for the {World-Wide Web}.  They act as
	{clients} to remote {web servers}.

	(1996-05-31)

but has scope implications.

If you are in control

<character> (Or "ctrl", "^") One (or a pair) of {modifier
	keys} found on all modern {keyboards}.  If the control key is
	held down while pressing and releasing certain other keys then
	a "{control character}" is generated, e.g. holding control and
	hitting "A" generates control-A ({ASCII} code 1).  The ASCII
	code for the control character is generally 64 less than that
	for the unmodified character.

	The control key does not generate any character on its own but
	most modern keyboards and {operating systems} allow a program
	to tell whether each of the individual keys on the keyboard
	(including modifier keys) is pressed at any time.

	Control characters mostly have some kind of "non-printing"
	effect on the output such as ringing the bell (Control-G) or
	advancing to the next line (Control-J).  Most have alternative
	names suggesting these functions (Bell, Line Feed, etc.).

	See {ASCII character table}.

	(1997-07-10)

of writing the JAVAScript bits then you can just
write

1. <chat> {Unix}'s simple {talk} command and {protocol}.
	write has been largely superseded by {talk} and then {irc}.

	An enhancement, {RWP}, has been proposed.

	2. <tool> A simple {text editor} for {Windows}.

	(1998-04-28)

the JAVAScript bits so there are no problems with using eval().
There is only one little complication and it is with naming global
variable

<programming> (Sometimes "var" /veir/ or /var/) A named memory
	location in which a program can store intermediate results and
	from which it can read it them.  Each {programming language}
	has different rules about how variables can be named, typed,
	and used.  Typically, a value is "assigned" to a variable in
	an {assignment} statement.  The value is obtained by
	evaluating an expression and then stored in the variable.  For
	example, the assignment

		x = y + 1

	means "add one to y and store the result in x".  This may look
	like a mathematical equation but the mathematical equality is
	only true in the program until the value of x or y changes.
	Furthermore, statements like

		x = x + 1

	are common.  This means "add one to x", which only makes sense
	as a state changing operation, not as a mathematical equality.

	The simplest form of variable corresponds to a single-{word}
	of {memory} or a {CPU} {register} and an assignment to a
	{load} or {store} {machine code} operation.

	A variable is usually defined to have a {type}, which never
	changes, and which defines the set of values the variable can
	hold.  A type may specify a single ("atomic") value or a
	collection ("aggregate") of values of the same or different
	types.  A common aggregate type is the {array} - a set of
	values, one of which can be selected by supplying a numerical
	{index}.

	Languages may be {untyped}, {weakly typed}, {strongly typed},
	or some combination.  {Object-oriented programming} languages
	extend this to {object} types or {classes}.

	A variable's {scope} is the region of the program source
	within which it represents a certain thing.  Scoping rules are
	also highly language dependent but most serious languages
	support both {local variables} and {global variables}.
	{Subroutine} and {function} {formal arguments} are special
	variables which are set automatically by the language runtime
	on entry to the subroutine.

	In a {functional programming} language, a variable's value
	never changes and change of state is handled as recursion over
	lists of values.

	(2004-11-16)

s explicitly as global properties instead. Here is the
pertinent part of the above page regarding this issue.

<blockquote>
The main issue is the scope of entities (eg. variables or function

1. <mathematics> (Or "map", "mapping") If D and C are sets
	(the domain and codomain) then a function f from D to C,
	normally written "f : D -> C" is a subset of D x C such that:

	1. For each d in D there exists some c in C such that (d,c) is
	an element of f.  I.e. the function is defined for every
	element of D.

	2. For each d in D, c1 and c2 in C, if both (d,c1) and (d,c2)
	are elements of f then c1 = c2.  I.e. the function is uniquely
	defined for every element of D.

	See also {image}, {inverse}, {partial function}.

	2. <programming> Computing usage derives from the mathematical
	term but is much less strict.  In programming (except in
	{functional programming}), a function may return different
	values each time it is called with the same argument values
	and may have {side effects}.

	A {procedure} is a function which returns no value but has
	only {side-effects}.  The {C} language, for example, has no
	procedures, only functions.  {ANSI C} even defines a {type},
	{void}, for the result of a function that has no result.

	(1996-09-01)

s)
defined in the evaluated script. Because the call to eval() occurs
inside a JAVAScript function, entities defined in the evaluated script
may not persist after eval() returns. If you do want to define global
entities you may look at writing something like the following snip
inside the code block.

window.foo = 2; // instead of var foo = 2
</blockquote>

If you aren't in charge of the script bits and want to use script
insertion you could combine my library and one of the solution

<jargon> A {marketroid} term for something he wants to sell
	you without bothering you with the often dizzying distinctions
	between {hardware}, {software}, {services}, {applications},
	{file formats}, companies, brand names and {operating
	systems}.

	"{Flash} is a perfect image-streaming solution."  "What is
	it?"  "Um...  about a thousand dollars."

	See also: {technology}.

	(1998-07-07)

s posted
in the other c.l.j thread about script insertion.

Peter

From: Peter Michaux

Date: Monday, August 20, 2007

wrote in message:
wrote in message:
wrote in message:
[...]
> <blockquote>
> The main issue is the scope of entities (eg. variables or functions)
> defined in the evaluated script. Because the call to eval() occurs
> inside a JAVAScript function, entities defined in the evaluated script
> may not persist after eval() returns. If you do want to define global
> entities you may look at writing something like the following snip
> inside the code block.
if window is the root

1. <operating system> The {Unix} {superuser} account (with
	user name "root" and user ID 0) that overrides file
	permissions.  The term {avatar} is also used.  By extension,
	the privileged system-maintenance login on any {operating
	system}.

	See {root mode}, {go root}, {wheel}.

	[{Jargon File}]

	(1994-10-27)

	2. <operating system> {root directory}.

	(1996-11-21)

	3. <data> {root node}.

	(1998-11-14)

scope ( don't remember if it is, but I recall there
beeing a way to reference

1. <programming> An {address}, from the point of view of a
	programming language.  A pointer may be typed, with its {type}
	indicating the type of data to which it points.

	The terms "pointer" and "reference" are generally
	interchangable although particular programming languages often
	differentiate these two in subtle ways.  For example, {Perl}
	always calls them references, never pointers.  Conversely, in
	C, "pointer" is used, although "a reference" is often used to
	denote the concept that a pointer implements.

	{Anthony Hoare} once said:

	Pointers are like jumps, leading wildly from one part of the
	data structure to another.  Their introduction into high-level
	languages has been a step backward from which we may never
	recover.

	[C.A.R.Hoare "Hints on Programming Language Design", 1973,
	Prentice-Hall collection of essays and papers by Tony Hoare].

	2. <operating system> (Or "mouse pointer") An {icon}, usually
	a small arrow, that moves on the screen in response to
	movement of a {pointing device}, typically a {mouse}.  The
	pointer shows the user which object on the screen will be
	selected etc. when a mouse button is clicked.

	(1999-07-07)

it. ) I'd write
eval( "function() {"
+ THE_CODE_FROM_THE_SCRIPT

<language> A program written in a {scripting language}, but
	see {Ousterhout's dichotomy}.

	(1999-02-22)

_TAG +
"}" ).apply( window, [] ) ;
to get correct scope.

A function's apply() will set the scope the "this" key

1. <database> A value used to identify a {record} in a
	database, derived by applying some fixed function to the
	record.  The key is often simply one of the {fields} (a
	{column} if the database is considered as a table with records
	being rows, see "{key field}").  Alternatively the key may be
	obtained by applying some function, e.g. a {hash function}, to
	one or more of the fields.  The set of keys for all records
	forms an {index}.  Multiple indexes may be built for one
	database depending on how it is to be searched.

	2. <cryptography> A value which must be fed into the
	{algorithm} used to decode an encrypted message in order to
	reproduce the original {plain text}.  Some encryption schemes
	use the same (secret) key to encrypt and decrypt a message,
	but {public key encryption} uses a "private" (secret) key and
	a "public" key which is known by all parties.

	3. <hardware> An electromechanical {keyboard} button.

	(2003-07-04)

word when the
function run

<operating system, programming> The process of carrying out
	the {instructions} in a computer program by a computer.

	See also {dry run}.

	(1996-05-13)

s. There is more to the script insertion problem then just
resolving "this". Here is an example where the script to be inserted
is "var foo=1;"

var foo=4;
eval( "function() {var foo=1;}" ).apply( window, [] ) ;
alert(foo);

In this case the alert says "4" but successful script insertion, as
has been defined and discussed,'d result in an alert of "1". The
goal is to have the script run in the global scope complete

See also {complete graph}, {complete inference system},
	{complete lattice}, {complete metric space}, {complete partial
	ordering}, {complete theory}.

	[1. or 2. or both?]

	(1996-04-24)

ly.

Peter

From: Randy Webb

Date: Monday, August 20, 2007

Peter Michaux said the following on 8/20/2007 11:55 AM:
wrote in message:
1. for (possibly demented) reasons of my own it's actually an arbitrary mix
of js and html that I want to inject into the page, so of the 5 methods
offered in the other thread:

* Change Source- attempts to change the .src property of a script element.
* Change innerHMTL - inserts a script string via innerHTML.
* createElement - uses createElement to create a script block with a .src
attribute.
* Change .text - changes the .text property of a script element.
* createTextNode - creates the text part of a script element using
createTextNode

... I think only the .innerHTML one is an option for me.

2. A lot of the thread you referred me to is about IE, whereas my observed
issue affects Firefox too.

My fingers are still crossed that there's an answer to this for me, but hope
is ebbing away fast...
wrote in message a library that does what you want to do...sort of.
<URL: http://forkJAVAscript.org/mutate/docs>
What my script does it scan through the HTML that is about to be
inserted and pluck out all the script bits. It inserts the other HTML
and then process the JAVAScript bits. Instead of dynamic script
insertion, as Randy has investigated, I just eval() the script bits.
This is more cross-browser but has scope implications.

I have a script somewhere that lets you simply insert it via innerHTML
and then reads the script blocks back out and executes them. Is that
what yours does? (I have not looked at it).

If you are in control of writing the JAVAScript bits then you can just
write the JAVAScript bits so there are no problems with using eval().
There is only one little complication and it is with naming global
variables explicitly as global properties instead. Here is the
pertinent part of the above page regarding this issue.

The other problem that can come up is if your scripts contain a
document.write state

<storage, architecture, jargon, theory> How something is; its
	configuration, attributes, condition, or information content.
	The state of a system is usually temporary (i.e. it changes
	with time) and volatile (i.e. it will be lost or reset to some
	initial state if the system is switched off).

	A state may be considered to be a point in some {space} of all
	possible states.  A simple example is a light, which is either
	on or off.  A complex example is the electrical activation in
	a human brain while solving a problem.

	In computing and related fields, states, as in the light
	example, are often modelled as being {discrete} (rather than
	continuous) and the transition from one state to another is
	considered to be instantaneous.  Another (related) property of
	a system is the number of possible states it may exhibit.
	This may be finite or infinite.  A common model for a system
	with a finite number of discrete state is a {finite state
	machine}.

	[{Jargon File}]

	(1996-10-13)

ment :-)

<blockquote>
The main issue is the scope of entities (eg. variables or functions)
defined in the evaluated script. Because the call to eval() occurs
inside a JAVAScript function, entities defined in the evaluated script
may not persist after eval() returns. If you do want to define global
entities you may look at writing something like the following snip
inside the code block.
window.foo = 2; // instead of var foo = 2
</blockquote>
If you aren't in charge of the script bits and want to use script
insertion you could combine my library and one of the solutions posted
in the other c.l.j thread about script insertion.

I have yet to see a solution that handle

1. <programming, operating system> A simple item of data that
	identifies a resource.  For example, a {Unix} file handle
	identifies an open file and associated data such as whether it
	was opened for read or write and the current read/write
	position.  On the {Macintosh}, a handle is a pointer to a
	pointer to some dynamically-allocated memory.  The extra level
	of indirection allows on-the-fly {memory compaction} or
	{garbage collection} without invalidating application program
	references to the allocated memory.

	2. <jargon> An alias used intended to conceal a user's true
	identity in an electronic message.  The term is common on
	Citizen's Band and other amateur radio but, in that context
	usually means the user's real name as {FCC} rules forbid
	concealing one's identity.

	Use of grandiose handles is characteristic of {crackers},
	{weenies}, {spods}, and other lower forms of network life;
	true hackers travel on their own reputations.

	Compare {nick}.

	[{Jargon File}]

	(2004-07-20)

s document.write but I have an
idea in mind for it.

--
Randy
Chance Favors The Prepared Mind
comp.lang.JAVAscript FAQ

<convention> (FAQ, or rarely FAQL, FAQ list) A document
	provided for many {Usenet} {newsgroups} (and, more recently,
	{World-Wide Web} services) which attempts to answer questions
	which new readers often ask.  These are maintained by
	volunteers and posted regularly to the newsgroup.  You should
	always consult the FAQ list for a group before posting to it
	in case your question or point is common knowledge.

	The collection of all FAQ lists is one of the most precious
	and remarkable resources on the {Internet}.  It contains a
	huge wealth of up-to-date expert knowledge on many subjects of
	common interest.  Accuracy of the information is greatly
	assisted by its frequent exposure to criticism by an
	interested, and occasionally well-informed, audience (the
	readers of the relevant newsgroup).

	The main {FTP archive} for FAQs is on a computer called {RTFM}
	at {MIT}, where they can be accessed either {by group
	(ftp://rtfm.mit.edu/pub/usenet-by-group/comp.answers/)} or {by
	hierarchy (ftp://rtfm.mit.edu/pub/usenet-by-hierarchy/)}.
	There is another archive at {Imperial College
	(ftp://src.doc.ic.ac.uk/usenet/news-info/)}, London, UK and a
	{World-Wide Web} archive in {Ohio
	(http://www.cis.ohio-state.edu/hypertext/faq/usenet/top.html)},
	USA.

	The FAQs are also posted to {Usenet} newsgroups:
	{news:comp.answers}, {news:news.answers} and
	{news:alt.answers}.

	(1997-12-08)

- http://jibbering.com/faq/index.html
JAVAscript Best Practices - http://www.JAVAscriptToolbox.com/bestpractices/

From: Peter Michaux

Date: Monday, August 20, 2007

wrote in message:

Peter Michaux said the following on 8/20/2007 11:55 AM:
> <URL:http://forkJAVAscript.org/mutate/docs>
> What my script does it scan through the HTML that is about to be
> inserted and pluck out all the script bits. It inserts the other HTML
> and then process the JAVAScript bits. Instead of dynamic script
> insertion, as Randy has investigated, I just eval() the script bits.
> This is more cross-browser but has scope implications.
I have a script somewhere that lets you simply insert it via innerHTML
and then reads the script blocks back out and executes them. Is that
what yours does? (I have not looked at it).

I extract the scripts from the HTML before inserting the HTML into the
page. That way if some browser starts to automatically evaluate
scripts when they are inserted by innerHTML I'm not screwed. There
already is one old browser out there that does this: NN6? Then after
inserting the HTML, I eval() the script bits in order. There are pros
and cons for just about every decisions in dealing with this stuff. I
find the system

1. The {supervisor} program or {operating system} on a
	computer.

	2. The entire computer system, including input/output devices,
	the {supervisor} program or {operating system} and possibly
	other {software}.

	3. Any large program.

	4. Any method or {algorithm}.

	[{Jargon File}]

I built easy to use.

There is a bit more too it then that. My script takes into account
problems with inserting table

<database> A collection of {records} in a {relational database}.

	(1997-06-04)

rows or tbody elements by "parsing" the
html first in the appropriate surrounding element. There are
assumptions about a well formed html fragment. blah blah blah. That
script was actually a fun project.> > If you aren't in charge of the script bits and want to use script

> insertion you could combine my library and one of the solutions posted
> in the other c.l.j thread about script insertion.
I have yet to see a solution that handles document.write but I have an
idea in mind for it.

You are obsessed! Just curious but when is it that you are wanting to
do script insertion with totally random

1. Unpredictable (closest to mathematical definition); weird.
	"The system's been behaving pretty randomly."

	2. Assorted; undistinguished.  "Who was at the conference?"
	"Just a bunch of random business types."

	3. (pejorative) Frivolous; unproductive; undirected.  "He's
	just a random loser."

	4. Incoherent or inelegant; poorly chosen; not well organised.
	"The program has a random set of misfeatures."  "That's a
	random name for that function."  "Well, all the names were
	chosen pretty randomly."

	5. In no particular order, though {deterministic}.  "The I/O
	channels are in a pool, and when a file is opened one is
	chosen randomly."

	6. Arbitrary.  "It generates a random name for the scratch
	file."

	7. Gratuitously wrong, i.e. poorly done and for no good
	apparent reason.  For example, a program that handles file
	name defaulting in a particularly useless way, or an assembler
	routine that could easily have been coded using only three
	registers, but redundantly uses seven for values with
	non-overlapping lifetimes, so that no one else can invoke it
	without first saving four extra registers.  What {randomness}!

	8.  A random hacker; used particularly of high-school students
	who soak up computer time and generally get in the way.

	9.  Anyone who is not a hacker (or, sometimes, anyone not
	known to the hacker speaking).  "I went to the talk, but the
	audience was full of randoms asking bogus questions".

	10.  (occasional MIT usage) One who lives at Random Hall.  See
	also {J. Random}, {some random X}.

	[{Jargon File}]

	(1995-12-05)

scripts you have not written
yourself or written by a coworker? Just academic interest?

Peter

From: Randy Webb

Date: Monday, August 20, 2007

Jon Maz said the following on 8/20/2007 5:20 AM:

Hi Peter,
Thanks for that - I had no idea this'd be a complex issue. A couple of
observations:
1. for (possibly demented) reasons of my own it's actually an arbitrary mix
of js and html that I want to inject into the page, so of the 5 methods
offered in the other thread:
* Change Source- attempts to change the .src property of a script element.
* Change innerHMTL - inserts a script string via innerHTML.
* createElement - uses createElement to create a script block with a .src
attribute.
* Change .text - changes the .text property of a script element.
* createTextNode - creates the text part of a script element using
createTextNode
... I think only the .innerHTML one is an option for me.

The thread that Peter sent you to is not the best thread for what you are
trying to do. There is another one in the archives if I can find it.

<URL:
http://groups.google.com/group/comp.lang.JAVAscript/search?group=comp.lang.JAVAscript&q=load

1. To copy {data} (often {program} {code} to be {run}) into
	{memory}, possibly {parsing} it somehow in the process.
	E.g. "{WordPerfect} can't load this {RTF} file - are you sure
	it didn't get corrupted in the {download}?"  Opposite of
	{save}.

	2. The degree to which a computer, {network}, or other
	resource is used, sometimes expressed as a percentage of the
	maximum available.  E.g. "What kind of CPU load does that
	program give?", "The network's constantly running at 100%
	load".  Sometimes used, by extension, to mean "to increase the
	level of use of a resource".  E.g. "Loading a spreadsheet
	really loads the CPU".  See also: {load balancing}.

	3. To {install} a piece of {software} onto a system.
	E.g. "The computer guy is gonna come load Excel on my laptop
	for me".  This usage is widely considered to be incorrect.

	(2002-07-02)

HTMLFragment>

The name of the function that was last written for what you are doing is
named

<networking> Name Daemon.

	<networking> A {Unix} {background} process that converts
	{hostnames} to {Internet addresses} for the {TCP/IP}
	{protocol}.

	{Unix manual page}: named(8).

	See also {DNS}.

	(1995-03-28)

loadHTMLFragment and looks like this:

function loadHTMLFragment(elemId, HTMLFragment)
{
if (document &&
document.getElementById &&
document.getElementById(elemId) &&
document.createElement &&
document.appendChild &&
document.getElementsByTagName)
{
var el = document.getElementById(elemId);
el.innerHTML = " " + HTMLFragment;
//The   is a hack

<jargon> 1. Originally, a quick job that produces what is
	needed, but not well.

	2.  An incredibly good, and perhaps very time-consuming, piece
	of work that produces exactly what is needed.

	3. To bear emotionally or physically.  "I can't hack this
	heat!"

	4. To work on something (typically a program).  In an
	immediate sense: "What are you doing?"  "I'm hacking TECO."
	In a general (time-extended) sense: "What do you do around
	here?"  "I hack TECO."  More generally, "I hack "foo"" is
	roughly equivalent to ""foo" is my major interest (or
	project)".  "I hack solid-state physics."  See {Hacking X for
	Y}.

	5. To pull a prank on.  See {hacker}.

	6. To interact with a computer in a playful and exploratory
	rather than goal-directed way.  "Whatcha up to?"  "Oh, just
	hacking."

	7.  Short for {hacker}.

	8. See {nethack}.

	9. (MIT) To explore the basements, roof ledges, and steam
	tunnels of a large, institutional building, to the dismay of
	Physical Plant workers and (since this is usually performed at
	educational institutions) the Campus Police.  This activity
	has been found to be eerily similar to playing adventure games
	such as {Dungeons and Dragons} and {Zork}.  See also
	{vadding}.

	See also {neat hack}, {real hack}.

	[{Jargon File}]

	(1996-08-26)

to cause IE to process the
//script elements if the first node

1. A point or vertex in a {graph}.

	2. {network node}.

	3. A {hypertext} document.

in the
//HTMLFragment is a script element.

var d =el.getElementsByTagName('script');
var t = d.length;
for (var x=0;x<t;x++)
{
var newScript = document.createElement('script');
newScript.type

<theory, programming> (Or "data type") A set of values from
	which a {variable}, {constant}, {function}, or other
	{expression} may take its value.  A type is a classification
	of data that tells the {compiler} or {interpreter} how the
	programmer intends to use it.  For example, the process and
	result of adding two variables differs greatly according to
	whether they are integers, floating point numbers, or strings.

	Types supported by most programming languages include
	{integers} (usually limited to some range so they will fit in
	one {word} of storage), {Booleans}, {floating point numbers},
	and characters.  {Strings} are also common, and are
	represented as {lists} of characters in some languages.

	If s and t are types, then so is s -> t, the type of
	{functions} from s to t; that is, give them a term of type s,
	functions of type s -> t will return a term of type t.

	Some types are {primitive} - built-in to the language, with no
	visible internal structure - e.g. Boolean; others are
	composite - constructed from one or more other types (of
	either kind) - e.g. {lists}, {arrays}, {structures}, {unions}.
	{Object-oriented programming} extends this with {classes}
	which encapsulate both the structure of a type and the
	operations that can be performed on it.

	Some languages provide {strong typing}, others allow {implicit
	type conversion} and/or {explicit type conversion}.

	(2003-12-22)

= "text/JAVAscript";
newScript.text = d[x].text;
el.appendChild(newScript);
}
for (var y=0;y<t;y++)
{
el.removeChild(el.getElementsByTagName("script")[y]);
}
}
}

The comment

<programming> (Or "remark") Explanatory text embedded in
	program {source} (or less often data) intended to help human
	readers understand it.

	Code completely without comments is often hard to read, but
	too heavily commented code isn't much better, especially if
	the comments are not kept up-to-date with changes to the code.
	Too much commenting may mean that the code is
	over-complicated.  A good rule is to comment everything that
	needs it but write code that doesn't need much of it.

	A particularly irksome form of over-commenting explains
	exactly what each statement does, even when it is obvious to
	any reasonably competant programmer, e.g.

		/* Open the input file */
		infd = open(input_file, O_RDONLY);

	(1998-04-28)

you see about IE is because there is a bug

<programming> An unwanted and unintended property of a program
	or piece of hardware, especially one that causes it to
	malfunction.  Antonym of {feature}.  E.g. "There's a bug in
	the editor: it writes things out backward."  The
	identification and removal of bugs in a program is called
	"{debugging}".

	Admiral {Grace Hopper} (an early computing pioneer better
	known for inventing {COBOL}) liked to tell a story in which a
	technician solved a {glitch} in the {Harvard Mark II machine}
	by pulling an actual insect out from between the contacts of
	one of its relays, and she subsequently promulgated {bug} in
	its hackish sense as a joke about the incident (though, as she
	was careful to admit, she was not there when it happened).
	For many years the logbook associated with the incident and
	the actual bug in question (a moth) sat in a display case at
	the Naval Surface Warfare Center (NSWC).  The entire story,
	with a picture of the logbook and the moth taped into it, is
	recorded in the "Annals of the History of Computing", Vol. 3,
	No. 3 (July 1981), pp. 285--286.

	The text of the log entry (from September 9, 1947), reads
	"1545 Relay #70 Panel F (moth) in relay.  First actual case of
	bug being found".  This wording establishes that the term was
	already in use at the time in its current specific sense - and
	Hopper herself reports that the term "bug" was regularly
	applied to problems in radar electronics during WWII.

	Indeed, the use of "bug" to mean an industrial defect was
	already established in Thomas Edison's time, and a more
	specific and rather modern use can be found in an electrical
	handbook from 1896 ("Hawkin's New Catechism of Electricity",
	Theo. Audel & Co.)  which says: "The term "bug" is used to a
	limited extent to designate any fault or trouble in the
	connections or working of electric apparatus."  It further
	notes that the term is "said to have originated in
	{quadruplex} telegraphy and have been transferred to all
	electric apparatus."

	The latter observation may explain a common folk etymology of
	the term; that it came from telephone company usage, in which
	"bugs in a telephone cable" were blamed for noisy lines.
	Though this derivation seems to be mistaken, it may well be a
	distorted memory of a joke first current among *telegraph*
	operators more than a century ago!

	Actually, use of "bug" in the general sense of a disruptive
	event goes back to Shakespeare!  In the first edition of
	Samuel Johnson's dictionary one meaning of "bug" is "A
	frightful object; a walking spectre"; this is traced to
	"bugbear", a Welsh term for a variety of mythological monster
	which (to complete the circle) has recently been reintroduced
	into the popular lexicon through fantasy {role-playing games}.

	In any case, in jargon the word almost never refers to
	insects.  Here is a plausible conversation that never actually
	happened:

	"There is a bug in this ant farm!"

	"What do you mean?  I don't see any ants in it."

	"That's the bug."

	[There has been a widespread myth that the original bug was
	moved to the Smithsonian, and an earlier version of this entry
	so asserted.  A correspondent who thought to check discovered
	that the bug was not there.  While investigating this in late
	1990, your editor discovered that the NSWC still had the bug,
	but had unsuccessfully tried to get the Smithsonian to accept
	it - and that the present curator of their History of
	American Technology Museum didn't know this and agreed that it
	would make a worthwhile exhibit.  It was moved to the
	Smithsonian in mid-1991, but due to space and money
	constraints has not yet been exhibited.  Thus, the process of
	investigating the original-computer-bug bug fixed it in an
	entirely unexpected way, by making the myth true!  - ESR]

	[{Jargon File}]

	(1999-06-29)

in IE where if
the first element in the innerHTML is a script element then it won't
execute that script block for you for some odd ball reason. The simplest
solution was to blanket insert a blank space

<character> The space character, {ASCII} 32.

	See {octal forty}.

and avoid the issue all
together.

It still has issues with potential scope issues, and with document.write
issues. If any of your script blocks have a document.write in it then it
will fubar your page by replacing it. I have some ideas on ways around
it but have not fooled with it in a few months. Maybe this will push

1. <programming> To put something onto a {stack} or {pdl}.

	Opposite: "{pop}".

	2. <communications> {push media}.

	[{Jargon File}]

	(1997-04-10)

me
to get around to it. The basic idea is to scan the script blocks, find
document.write line

1. <hardware> An electrical conductor.  For distances larger
	than a breadbox, a single line may consist of two electrical
	conductors in twisted, parallel, or concentric arrangement
	used to transport one logical signal.

	By extension, a (usually physical) medium such as an {optical
	fibre} which carries a signal.

	(1995-09-29)

s and try to figure out how to go about inserting
whatever it was trying to write. Even that has issues with it.

2. A lot of the thread you referred me to is about IE, whereas my observed
issue affects Firefox too.

Your issue affects any browser other than NS6.1x, NS6.2x, iCab3.0.3 Mac,
IE5.2 Mac as they are the only ones that will execute scripts inserted
via innerHTML (unless there is one that I do not know about). If you find
a browser other than those above that will execute scripts inserted via
innerHTML, please let me know.

My fingers are still crossed that there's an answer to this for me, but hope
is ebbing away fast...

There is an answer, and your hope can ebb higher. Search the archives
for - script insertion randy webb - and you can find more information
about what you are trying to do than I care to sit

<tool, file format> (filename extension: .sit) A file
	{archiving} and {compression} utility, developed by {Aladdin
	Systems, Inc.}.  Stuffit was originally developed for the
	{Macintosh} and is still the Mac standard tool for compression
	and archiving (compressing multiple files into one).  Stuffit
	is now also available for {Microsoft Windows} and {Linux}.
	Compared to the standard Windows tool, {WinZip}, it is faster
	and gives better compression.

	Stuffit archives can be extracted with Stuffit Expander.

	{Stuffit Home (http://www.stuffit.com/)}.

	(2003-09-20)

and type out again.

The biggest thing is whether you control (in any manner) the HTML/Script
you are inserting into your page. If you do, and plan it properly,
script insertion becomes almost trivial.

--
Randy
Chance Favors The Prepared Mind
comp.lang.JAVAscript FAQ - http://jibbering.com/faq/index.html
JAVAscript Best Practices - http://www.JAVAscriptToolbox.com/bestpractices/

From: Randy Webb

Date: Monday, August 20, 2007

Peter Michaux said the following on 8/20/2007 8:43 PM:
wrote in message:
Peter Michaux said the following on 8/20/2007 11:55 AM:
<URL:http://forkJAVAscript.org/mutate/docs>
What my script does it scan through the HTML that is about to be
inserted and pluck out all the script bits. It inserts the other HTML
and then process the JAVAScript bits. Instead of dynamic script
insertion, as Randy has investigated, I just eval() the script bits.
This is more cross-browser but has scope implications.
I have a script somewhere that lets you simply insert it via innerHTML
and then reads the script blocks back out and executes them. Is that
what yours does? (I have not looked at it).
I extract the scripts from the HTML before inserting the HTML into the
page. That way if some browser starts to automatically evaluate
scripts when they are inserted by innerHTML I'm not screwed. There
already is one old browser out there that does this: NN6? Then after
inserting the HTML, I eval() the script bits in order. There are pros
and cons for just about every decisions in dealing with this stuff. I
find the system I built easy to use.

NN6.1, NN6.2, iCab3 and IE5.2/Mac execute scripts inserted via
innerHMTL. Detecting that behavior is trivial though. Use the onload
event, insert something like this via innerHTML:

<script type="text/JAVAscript">
someBooleanVariable = false;
</script>

And have this already in the page:
<script type="text/JAVAscript">
someBooleanVariable = true;
</script>

And then have your function check that variable:

function doSomethingWithThatAwfulCode(){
if(someBooleanVariable){return}
}

Then, if they get executed previously you know not to fool with them
again, you simply return out of the function.

There is a bit more too it then that. My script takes into account
problems with inserting table rows or tbody elements by "parsing" the
html first in the appropriate surrounding element. There are
assumptions about a well formed html fragment. blah blah blah. That
script was actually a fun project.

I have never been one to try to dynamically create tables on the fly.
Most of my interest in it is the fact that IE gets it right and FF gets
it wrong. The personal page I was working on when I first started
playing with HikkScript (JS on the fly) used tables but I have not fooled
with it in about 5 years or so. Can you imagine trying to reverse a
script that document.writes embedded tables though?

Note: I have decided to start calling this HikkScript just for the sake
of it and make it easier to find in the archives. It has a certain
"personal ring" to it :)

If you aren't in charge of the script bits and want to use script
insertion you could combine my library and one of the solutions posted
in the other c.l.j thread about script insertion.
I have yet to see a solution that handles document.write but I have an
idea in mind for it.
You are obsessed!

That's what they tell me. A "This attitude plus FAQ mantainer: a true
humanitarian!" is what one poster here said about me when I said I
wanted to be ahead of the game on this one :) (You can find that in the
createTextNode IE7 thread).

Just curious but when is it that you are wanting to
do script insertion with totally random scripts you have not written
yourself or written by a coworker?

Personally? I do not. It comes up mostly from ill-fated "Ajax sites"
where people do not re-do the back end to make it ajax friendly and just
retrieve complete pages and want to insert it. Then they can say "Yeah,
we use AJAX on our site" without taking advantage of the main advantage
of AJAX.

Just academic interest?

Mostly, as anybody that is trying to insert HTML with document.writes in
it has more problems than trying to get the document.write to work right
as they need to change the back end to get rid of the document.write
statements.

--
Randy
Chance Favors The Prepared Mind
comp.lang.JAVAscript FAQ - http://jibbering.com/faq/index.html
JAVAscript Best Practices - http://www.JAVAscriptToolbox.com/bestpractices/

From: Randy Webb

Date: Monday, August 20, 2007

Randy Webb said the following on 8/20/2007 8:46 PM:

Jon Maz said the following on 8/20/2007 5:20 AM:
Hi Peter,

Thanks for that - I had no idea this'd be a complex issue. A
couple of observations:

1. for (possibly demented) reasons of my own it's actually an
arbitrary mix of js and html that I want to inject into the page, so
of the 5 methods offered in the other thread:

* Change Source- attempts to change the .src property of a script
element.
* Change innerHMTL - inserts a script string via innerHTML.
* createElement - uses createElement to create a script block with a
.src attribute.
* Change .text - changes the .text property of a script element.
* createTextNode - creates the text part of a script element using
createTextNode

... I think only the .innerHTML one is an option for me.
The thread that Peter sent you to is not the best thread for what you are
trying to do. There is another one in the archives if I can find it.
<URL:
http://groups.google.com/group/comp.lang.JAVAscript/search?group=comp.lang.JAVAscript&q=loadHTMLFragment>
The name of the function that was last written for what you are doing is
named loadHTMLFragment and looks like this:

I have revised that function to accommodate NN6.1/NN6.2Win and hopefully
it'll accommodate the innerHTML mac browsers (iCab and IE). If anyone
could test it on a non-windows browser I'd be grateful. Added was
the innerHTML testing

<testing> The process of exercising a product to identify
	differences between expected and actual behaviour.  Typically
	testing is bottom-up: {unit testing} and {integration testing}
	by developers, {system testing} by testers, and {user
	acceptance testing} by users.

	{Test coverage} attempts to assess how complete a test has
	been.

	2. The second stage in a {generate and test} search
	{algorithm}.

	[{Jargon File}]

	(2003-09-24)

so that browsers that execute innerHTML scripts
would not execute them twice.

var innerHTMLFailed=true;
window.onload = checkIt;

function checkIt(){
document.getElementById('myDiv').innerHTML = '<script
type="text/JAVAscript">var innerHTMLFailed = false;<\/script>'
}
function loadHTMLFragment(elemId, HTMLFragment)
{
if (document &&
document.getElementById &&
document.getElementById(elemId) &&
document.createElement &&
document.appendChild &&
document.getElementsByTagName &&
{
var el = document.getElementById(elemId);
el.innerHTML = " " + HTMLFragment;
//The   is a hack to cause IE to process the
//script elements if the first node in the
//HTMLFragment is a script element.
if(innerHTMLFailed)
{
var d =el.getElementsByTagName('script');
var t = d.length;
for (var x=0;x<t;x++)
{
var newScript = document.createElement('script');
newScript.type = "text/JAVAscript";
newScript.text = d[x].text;
el.appendChild(newScript);
}
for (var y=0;y<t;y++)
{
el.removeChild(el.getElementsByTagName("script")[y]);
}
}
}
}

Next step is a test of the .text attribute since I know of browsers that
don't support

After-sale handholding; something many software vendors
	promise but few deliver.  To hackers, most support people are
	useless - because by the time a hacker calls support he or she
	will usually know the software and the relevant manuals better
	than the support people (sadly, this is *not* a joke or
	exaggeration).  A hacker's idea of "support" is a tte--tte
	or exchange of {electronic mail} with the software's designer.

	[{Jargon File}]

	(1995-02-15)

setting the .text property of a newScript element.

--
Randy
Chance Favors The Prepared Mind
comp.lang.JAVAscript FAQ - http://jibbering.com/faq/index.html
JAVAscript Best Practices - http://www.JAVAscriptToolbox.com/bestpractices/

From: Jon Maz

Date: Tuesday, August 21, 2007

<quote>
You are obsessed! Just curious but when is it that you are wanting to
do script insertion with totally random scripts you have not written
yourself or written by a coworker? Just academic interest?
</quote>

For myself I am trying to write code that asynchronously injects adverts
into a web page. You will notice across the web millions of sites whose pages
might be quite fast-loading in themselves, but with 3 or 4 massive delays as
the page goes to ads.domain.com to fetch the ad code, which
characteristically is a mix of JAVAscript and html, and is generate

To produce something according to an {algorithm} or program or
	set of rules, or as a (possibly unintended) {side effect} of
	the execution of an algorithm or program.

	The opposite of {parse}.

	[{Jargon File}]

	(1995-06-15)

d by 3rd
party software.

I want this external data

<data, data processing, jargon> /day't*/ (Or "raw data")
	Numbers, {characters}, {images}, or other method of recording,
	in a form which can be assessed by a human or (especially)
	input into a {computer}, stored and {processed} there, or
	transmitted on some {digital channel}.  Computers nearly
	always represent data in {binary}.

	Data on its own has no meaning, only when interpreted by some
	kind of {data processing system} does it take on meaning and
	become {information}.

	People or computers can find patterns in data to perceive
	information, and information can be used to enhance
	{knowledge}.  Since knowledge is prerequisite to wisdom, we
	always want more data and information.  But, as modern
	societies verge on {information overload}, we especially need
	better ways to find patterns.

	1234567.89 is data.

	"Your bank balance has jumped 8087% to $1234567.89" is
	information.

	"Nobody owes me that much money" is knowledge.

	"I'd better talk to the bank before I spend it, because of
	what has happened to other people" is wisdom.

	(1999-04-30)

injected in the background

1. <operating system> A task running in the background (a
	background task) is detached from the terminal where it was
	started (and often running at a lower priority); opposite of
	{foreground}.  This means that the task's input and output
	must be from/to files (or other processes).

	Nowadays this term is primarily associated with {Unix}, but it
	appears to have been first used in this sense on {OS/360}.

	Compare {amp off}, {batch}, {slopsucker}.

	2. <jargon> For a human to do a task "in the background" is to
	do it whenever {foreground} matters are not claiming your
	undivided attention, and "to background" something means to
	relegate it to a lower priority.  "For now, we'll just print a
	list of nodes and links; I'm working on the graph-printing
	problem in the background."  Note that this implies ongoing
	activity but at a reduced level or in spare time, in contrast
	to mainstream "back burner" (which connotes benign neglect
	until some future resumption of activity).  Some people prefer
	to use the term for processing that they have queued up for
	their unconscious minds (often a fruitful tack to take upon
	encountering an obstacle in creative work).

	(1996-05-28)

, after the main page
has finished rendering, for an improved user experience. Make sense?

JON

From: Jon Maz

Date: Tuesday, August 21, 2007

Hi Peter,

Currently http://forkJAVAscript.org/mutate/docs is down

1. Not operating.  "The up escalator is down" is considered a
	humorous thing to say, and "The elevator is down" always
	means "The elevator isn't working" and never refers to what
	floor the elevator is on.  With respect to computers, this
	term has passed into the mainstream; the extension to other
	kinds of machine is still hackish.

	2. "go down" To stop functioning; usually said of the
	{system}.  The message from the {console} that every hacker
	hates to hear from the operator is "System going down in 5
	minutes".

	3. "take down", "bring down" To deactivate purposely, usually
	for repair work or {PM}.  "I'm taking the system down to work
	on that bug in the tape drive."  Occasionally one hears the
	word "down" by itself used as a verb in this sense.

	See {crash}; opposite: {up}.

	[{Jargon File}]

	(1994-12-07)

. A temporary issue?

JON

From: Peter Michaux

Date: Tuesday, August 21, 2007

wrote in message:

Hi Peter,
Currentlyhttp://forkJAVAscript.org/mutate/docsis down. A temporary issue?

Unfortunately it is down. I'm trying to get my hosting company to tell
me what's up. Hope

<language> A {functional programming} language designed by
	R.M. Burstall, D.B. MacQueen and D.T. Sanella at {University
	of Edinburgh} in 1978.  It is a large language supporting
	user-defined {prefix}, {infix} or {distfix} operators.  Hope
	has {polymorphic} typing and allows {overloading} of operators
	which requires explicit type declarations.  Hope has {lazy
	lists} and was the first language to use {call-by-pattern}.

	It has been ported to {Unix}, {Macintosh}, and {IBM PC}.

	See also {Hope+}, {Hope+C}, {Massey Hope}, {Concurrent Massey
	Hope}.

	{(ftp://brolga.cc.uq.oz.au/pub/hope)}.

	[R.M.Burstall, D.B.MacQueen, D.T.Sanella, "HOPE: An
	experimental applicative language", Proc. 1980 Lisp conf.,
	Stanford, CA, p.136-143, Aug 1980].

	["A HOPE Tutorial", R. Bailey, BYTE Aug 1985, pp.235-258].

	["Functional Programming with Hope", R. Bailey, Ellis Horwood
	1990].

	(1992-11-27)

fully it'll be back up today.

Peter

From: Peter Michaux

Date: Tuesday, August 21, 2007

wrote in message:

<quote>
You are obsessed! Just curious but when is it that you are wanting to
do script insertion with totally random scripts you have not written
yourself or written by a coworker? Just academic interest?
</quote>
For myself I am trying to write code that asynchronously injects adverts
into a web page. You will notice across the web millions of sites whose pages
might be quite fast-loading in themselves, but with 3 or 4 massive delays as
the page goes to ads.domain.com to fetch the ad code, which
characteristically is a mix of JAVAscript and html, and is generated by 3rd
party software.
I want this external data injected in the background, after the main page
has finished rendering, for an improved user experience. Make sense?

What about just inserting an iframe into the page and setting the src
attribute to a URL that produces the ads? Because of iframes, it is not
a valid approach for HTML strict

A function f is strict in an argument if

		f bottom = bottom

	(See {bottom}).  In other words, the result depends on the
	argument so evaluation of an application of the function
	cannot terminate until evaluation of the argument has
	terminated.

	If the result is only {bottom} when the argument is bottom
	then the function is also {bottom-unique}.

	See also {strict evaluation}, {hyperstrict}.

	(1995-01-25)

pages but is on HTML transitional.

Peter

From: Jon Maz

Date: Tuesday, August 21, 2007

Hi Peter,

<quote>
What about just inserting an iframe into the page and setting the src
attribute to a URL that produces the ads? Because of iframes, it is not
a valid approach for HTML strict pages but is on HTML transitional.
</quote>

That's probably where I will end up. For reasons I can not remember now I
started trying to do this the .js way, and I'm stupidly determined to try to
get it to work.

Though in fact I am going for HTML strict too <sigh>.

JON

From: Peter Michaux

Date: Tuesday, August 21, 2007

wrote in message:

Hi Peter,
<quote>
What about just inserting an iframe into the page and setting the src
attribute to a URL that produces the ads? Because of iframes, it is not
a valid approach for HTML strict pages but is on HTML transitional.
</quote>
That's probably where I will end up. For reasons I can not remember now I
started trying to do this the .js way, and I'm stupidly determined to try to
get it to work.
Though in fact I am going for HTML strict too <sigh>.

I tried that for a while. Now I think HTML transitional is the only
useful doctype. For IE6 if you want to do overlays you need the
"iframe shim

<jargon, memory management> A small piece of data inserted in
	order to achieve a desired {memory alignment} or other
	addressing property.

	For example, the {PDP-11} {Unix} {linker}, in split I&D
	(instructions and data) mode, inserts a two-{byte} shim at
	location 0 in data space so that no data object will have an
	address of 0 (and be confused with the {C} null pointer).

	See also {loose bytes}.

	[{Jargon File}]

	(1994-12-21)

hack". If you want to do background file

<file system> An element of data storage in a {file system}.

	The history of computing is rich in varied kinds of files and
	{file systems}, whether ornate (e.g., {Macintosh file system}
	for a well-known case) or deficient (e.g., many simple
	pre-1980s file systems don't allow {directories}).

	However, the prototypical file has these characteristics:

	* It is a single sequence of bytes (but consider {Macintosh}
	{resource forks}).

	* It has a finite length, unlike, e.g. a {Unix} {device}.

	* It is stored in a {non-volatile storage} medium (but see
	{ramdrive}).

	* It exists (nominally) in a {directory}.

	* It has a name that it can be referred to by in file
	operations, possibly in combination with its {path}.

	Additionally, a file system may associate other information
	with a file, such as {permission} bits or other {file
	attributes}; timestamps for file creation, last revision, and
	last access; revision numbers (a` la VMS), and other kinds of
	{magic}.

	Compare: {document}.

	(1997-04-08)

uploads that
look like XMLHttpRequest to the user then you need hidden iframes.

If you'll be allowing arbitrary people to inject arbitrary HTML in
your page there is a better chance things will work out well if you
are using the more forgiving transitional doctype.

Peter

From: Randy Webb

Date: Tuesday, August 21, 2007

Jon Maz said the following on 8/21/2007 6:23 AM:

<quote>
You are obsessed! Just curious but when is it that you are wanting to
do script insertion with totally random scripts you have not written
yourself or written by a coworker? Just academic interest?
</quote>
For myself I am trying to write code that asynchronously injects adverts
into a web page. You will notice across the web millions of sites whose pages
might be quite fast-loading in themselves, but with 3 or 4 massive delays as
the page goes to ads.domain.com to fetch the ad code, which
characteristically is a mix of JAVAscript and html, and is generated by 3rd
party software.

If the JS has any document.write calls, "with" operators, refers to
"this" and there are possibly a few more that I can not think of off the
top of my head, then you are dead

1. Non-functional; {down}; {crash}ed.  Especially used of
	{hardware}.

	2. At {XEROX PARC}, software that is working but not
	undergoing continued development and support.

	[{Jargon File}]

in the water before you start. You
would just about have to write your own HTML parser

<language> An {algorithm} or program to determine the
	syntactic structure of a sentence or string of symbols in some
	language.  A parser normally takes as input a sequence of
	{tokens} output by a {lexical analyser}.  It may produce some
	kind of {abstract syntax tree} as output.  One of the best
	known {parser generators} is {yacc}.

	(1997-07-21)

to determine
what/where to insert elements into the DOM and then your page loads
slower because it is having to parse all of the potential elements that
could be inserted with document.write code.

What you are describing is almost exactly the scenario I had in mind
with document.write calls albeit your situation is different than what I
had in mind. If a site uses "AJAX" to retrieve full documents instead of
HTML fragments then you end up with the same problem if the document has
ads/code in it that uses document.write statements.

I want this external data injected in the background, after the main page
has finished rendering, for an improved user experience. Make sense?

Put an IFrame on the page that has a secondary page in it that loads the
ad. It'll make your life simpler and save you a lot of sleepless nights.

--
Randy
Chance Favors The Prepared Mind
comp.lang.JAVAscript FAQ - http://jibbering.com/faq/index.html
JAVAscript Best Practices - http://www.JAVAscriptToolbox.com/bestpractices/

From: pl

Date: Tuesday, August 21, 2007

wrote in message:

> I want this external data injected in the background, after the main page
> has finished rendering, for an improved user experience. Make sense?
Put an IFrame on the page that has a secondary page in it that loads the
ad. It'll make your life simpler and save you a lot of sleepless nights.

Agreed, use an iframe and save yourself from a "world of pain." Some
browsers will let you write the ads normally/directly into the bottom
of the html as the page loads and then move the resulting DOM nodes to
the correct location

<storage> A {byte}, {word} or other small unit of storage
	space in a computer's {main memory} that is identified by its
	starting {address} (and size).

	(1999-04-19)

after the JS has executed. This is not real

1. Not simulated.  Often used as a specific antonym to
	{virtual} in any of its jargon senses.

	2. <mathematics> {real number}.

	[{Jargon File}]

	(1997-03-12)

ly
reliable though, particularly given that some ads do their own DOM
manipulation as they load. Whilst Firefox seems to literally move
things with appendChild, IE's implementation seems to be a bit quirky
- some rough testing indicates that it'll leave some object

<object-oriented> In {object-oriented programming}, an
	instance of the data structure and behaviour defined by the
	object's {class}.  Each object has its own values for the
	{instance variables} of its class and can respond to the
	{methods} defined by its class.

	For example, an object of the "Point" class might have
	instance variables "x" and "y" and might respond to the "plot"
	method by drawing a dot on the screen at those coordinates.

	(2004-01-26)

s behind.

From: Peter Michaux

Date: Tuesday, August 21, 2007

wrote in message:

In comp.lang.JAVAscript message <1187625350.498917.232...@xxxxxxxxxxx
oglegroups.com>, Mon, 20 Aug 2007 15:55:50, Peter Michaux
<petermich...@xxxxxxxxxxx> posted:
>If you are in control of writing the JAVAScript bits then you can just
>write the JAVAScript bits so there are no problems with using eval().
>There is only one little complication and it is with naming global
>variables explicitly as global properties instead. Here is the
>pertinent part of the above page regarding this issue.
Do you see any future problem in
<URL:http://www.merlyn.demon.co.uk/estrdate.htm#TT>?
One enters code in the blue bit just above heading "Testing and Timing"
(the textarea is preloaded with a function body, but JAVAscript doesn't
know that on loading, so use DEFINE & UNDEFINE), and executes it (check
the checkbox) in the next blue bit.
It's OK in IE6, FF2, Opera9 (though FF has a visible layout flaw).

It may have been a joke but Thomas

<language> A language compatible with the language
	{Dylan}(TM).  Thomas is NOT {Dylan}(TM).

	The first public release of a translator to {Scheme} by Matt
	Birkholz, Jim Miller, and Ron Weiss, written at {Digital
	Equipment Corporation}'s {Cambridge Research Laboratory} runs
	(slowly) on {MIT}'s {CScheme}, DEC's {Scheme->C}, Marc
	Feeley's {Gambi}, {Macintosh}, {PC}, {Vax}, {MIPS}, {Alpha},
	{680x0}.

	{(ftp://gatekeeper.pa.dec.com/pub/DEC/Thomas)}.

	Mailing list: <info-thomas@crl.dec.com>.

	["Dylan(TM) an object-oriented dynamic language", {Apple
	Computer}, Eastern Research and Technology, April 1992].

	(1992-09-11)

appeared to take offense. Did you
apologize for this?

<URL: http://groups.google.com/group/comp.lang.JAVAscript/msg/76e12383ad15a88b?dmode=source

<language, programming> (Or "source", or rarely "source
	language") The form in which a computer program is written by
	the programmer.  Source code is written in some formal
	programming language which can be compiled automatically into
	{object code} or {machine code} or executed by an
	{interpreter}.

	(1995-01-05)

>

Peter

From: Peter Michaux

Date: Tuesday, August 21, 2007

wrote in message:

Randy Webb said the following on 8/20/2007 8:46 PM:
I have revised that function to accommodate NN6.1/NN6.2Win and hopefully
it'll accommodate the innerHTML mac browsers (iCab and IE). If anyone
could test it on a non-windows browser I'd be grateful.

Have you posted a test page? I will click

<hardware> To press and release a {button} on a {mouse} or
	other {pointing device}.  This generates an {event}, also
	specifying the screen position, which is processed by the
	{window manager} or {application program}.  On a mouse with
	more than one button, the unqualified term usually implies
	pressing the left-most button (with the right index finger),
	other buttons would be qualified, e.g. "{right-click}".
	{Keyboard} modifiers may also be used, e.g. "shift-click",
	meaning to hold down the shift key on the keyboard while
	clicking the mouse button.

	If the mouse moves while the button is pressed then this is a
	{drag}.

	(1995-03-14)

some buttons for you and send
you the results.

Peter

Added was
the innerHTML testing so that browsers that execute innerHTML scripts
would not execute them twice.
var innerHTMLFailed=true;
window.onload = checkIt;
function checkIt(){
document.getElementById('myDiv').innerHTML = '<script
type="text/JAVAscript">var innerHTMLFailed = false;<\/script>'}
function loadHTMLFragment(elemId, HTMLFragment)
{
if (document &&
document.getElementById &&
document.getElementById(elemId) &&
document.createElement &&
document.appendChild &&
document.getElementsByTagName &&
{
var el = document.getElementById(elemId);
el.innerHTML = " " + HTMLFragment;
//The   is a hack to cause IE to process the
//script elements if the first node in the
//HTMLFragment is a script element.
if(innerHTMLFailed)
{
var d =el.getElementsByTagName('script');
var t = d.length;
for (var x=0;x<t;x++)
{
var newScript = document.createElement('script');
newScript.type = "text/JAVAscript";
newScript.text = d[x].text;
el.appendChild(newScript);
}
for (var y=0;y<t;y++)
{
el.removeChild(el.getElementsByTagName("script")[y]);
}
}
}
}
Next step is a test of the .text attribute since I know of browsers that

> don't support setting the .text property of a newScript element.

From: Randy Webb

Date: Wednesday, August 22, 2007

pl said the following on 8/21/2007 7:37 PM:
wrote in message:
I want this external data injected in the background, after the main page
has finished rendering, for an improved user experience. Make sense?
Put an IFrame on the page that has a secondary page in it that loads the
ad. It'll make your life simpler and save you a lot of sleepless nights.
Agreed, use an iframe and save yourself from a "world of pain."

If you truly want to be free from a "world of pain" then you stop
placing ads on a website

<World-Wide Web> (Or "website") Any computer on the
	{Internet} running a {World-Wide Web} {server} process.  A
	particular website is usually identified by the {hostname}
	part of a {URL}.  Multiple hostnames may actually map to the
	same computer in which case they are known as "{virtual
	servers}".

	(2005-07-12)

and your problems disappear.

--
Randy
Chance Favors The Prepared Mind
comp.lang.JAVAscript FAQ - http://jibbering.com/faq/index.html
JAVAscript Best Practices - http://www.JAVAscriptToolbox.com/bestpractices/

From: Randy Webb

Date: Wednesday, August 22, 2007

Peter Michaux said the following on 8/21/2007 10:27 PM:
wrote in message:
Randy Webb said the following on 8/20/2007 8:46 PM:

I have revised that function to accommodate NN6.1/NN6.2Win and hopefully
it'll accommodate the innerHTML mac browsers (iCab and IE). If anyone
could test it on a non-windows browser I'd be grateful.
Have you posted a test page? I will click some buttons for you and send
you the results.

Not really. The only thing I was wanting to test was the snippet with
the innerHTML in it to see if IE5.2 and iCab'd reset the variable. A
simple test is the same one I used in NS6:

innerHTMLFailed = true;
window.onload=testIt;
function testIt(){
insertScript()
alert('innerHTMLFailed is ' + innerHTMLFailed)
}

function insertScript(){
document.getElementById('scriptDiv').innerHTML='<script
type="text/JAVAscript">innerHTMLFailed = false;<\/script>'
}

If IE5.2 and iCab will alert false then it'll tell me, without testing
the main function, that it'll succeed.

--
Randy
Chance Favors The Prepared Mind
comp.lang.JAVAscript FAQ - http://jibbering.com/faq/index.html
JAVAscript Best Practices - http://www.JAVAscriptToolbox.com/bestpractices/

From: Peter Michaux

Date: Wednesday, August 22, 2007

Hi,

After all this fuss about script insertion and getting scripts to
execute in global scope, I found myself looking through the jQuery
code.

------------------------

// Evalulates a script in a global context

That which surrounds, and gives meaning to, something else.

	<grammar> In a {grammar} it refers to the symbols before and
	after the symbol under consideration.  If the syntax of a
	symbol is independent of its context, the grammar is said to
	be {context-free}.

// Evaluates Async. in Safari 2 :-(
globalEval: function( data ) {
data = jQuery.trim( data );
if ( data ) {
if ( window.execScript )
window.execScript( data );
else if ( jQuery.browser.safari )
// safari does not provide a synchronous

<operating system, communications> 1. Two or more processes
	that depend upon the occurrences of specific events such as
	common timing signals.

	2. Occurring at the same time or at the same rate or with a
	regular or predictable time relationship or sequence.

	Opposite: {asynchronous}.

	(1996-04-11)

global eval
window.setTimeout( data, 0 );
else
eval.call( window, data );
}
},

------------------------

That window.setTimeout(data, 0) call seems like an easy solution to
the scope problem. I may have missed it but was this every suggested
here instead of all this script element insertion?

Peter

From: Randy Webb

Date: Wednesday, August 22, 2007

Peter Michaux said the following on 8/22/2007 5:13 PM:

Hi,
After all this fuss about script insertion and getting scripts to
execute in global scope, I found myself looking through the jQuery
code.
------------------------
// Evalulates a script in a global context
// Evaluates Async. in Safari 2 :-(
globalEval: function( data ) {
data = jQuery.trim( data );
if ( data ) {
if ( window.execScript )
window.execScript( data );
else if ( jQuery.browser.safari )

Let me guess, silently, on what that line above does :)

// safari does not provide a synchronous global eval
window.setTimeout( data, 0 );
else
eval.call( window, data );
}
},
------------------------
That window.setTimeout(data, 0) call seems like an easy solution to
the scope problem. I may have missed it but was this every suggested
here instead of all this script element insertion?

I have not personally seen that suggestion and I am not sure what
setTimeout(data, 0) would've to do with any non-Safari browser. And, I
just plain *HATE* eval. Call me bonkers, I just prefer not to use it if
there is a non-eval alternative.

And, what does jQuery.trim do? I can pretty well guess what
jQuery.browser does.

--
Randy
Chance Favors The Prepared Mind
comp.lang.JAVAscript FAQ - http://jibbering.com/faq/index.html
JAVAscript Best Practices - http://www.JAVAscriptToolbox.com/bestpractices/

From: Peter Michaux

Date: Wednesday, August 22, 2007

wrote in message:

Peter Michaux said the following on 8/22/2007 5:13 PM:
> Hi,
> After all this fuss about script insertion and getting scripts to
> execute in global scope, I found myself looking through the jQuery
> code.
> ------------------------
>// Evalulates a script in a global context
>// Evaluates Async. in Safari 2 :-(
>globalEval: function( data ) {
> data = jQuery.trim( data );
> if ( data ) {
> if ( window.execScript )
> window.execScript( data );
> else if ( jQuery.browser.safari )
Let me guess, silently, on what that line above does :)
> // safari does not provide a synchronous global eval
> window.setTimeout( data, 0 );
> else
> eval.call( window, data );
> }
> },
> ------------------------
> That window.setTimeout(data, 0) call seems like an easy solution to
> the scope problem. I may have missed it but was this every suggested
> here instead of all this script element insertion?
I have not personally seen that suggestion

I had not seen it either but I think it is simple and clever.

and I am not sure what
setTimeout(data, 0) would've to do with any non-Safari browser. And, I
just plain *HATE* eval. Call me bonkers, I just prefer not to use it if
there is a non-eval alternative.

The big issue with eval is that it is slow and the code can not be
optimized. Each time eval is used the string has to be parsed first by
the JAVAScript engine

<jargon> 1. A piece of {hardware} that encapsulates some
	function but can't be used without some kind of {front end}.
	Today we have, especially, "{print engine}": the guts of a
	{laser printer}.

	2. An analogous piece of software; notionally, one that does a
	lot of noisy {crunching}, such as a "database engine", or
	"{search engine}".

	The hackish senses of "engine" are actually close to its
	original, pre-Industrial-Revolution sense of a skill, clever
	device, or instrument (the word is cognate to "ingenuity").
	This sense had not been completely eclipsed by the modern
	connotation of power-transducing machinery in {Charles
	Babbage}'s time, which explains why he named the
	stored-program computer that he designed in 1844 the
	"{Analytical Engine}".

	[{Jargon File}]

	(1996-05-31)

etc. However when you are inserting a script
element into a page you are just inducing eval without calling it. It
is eval in disguise with a global scope. And it also has many cross
browser issues that we've been exploring at length for months with
no real solution. The jQuery solution is extremely robust

Said of a system that has demonstrated an ability to recover
	gracefully from the whole range of exceptional inputs and
	situations in a given environment.  One step below
	{bulletproof}.  Carries the additional connotation of elegance
	in addition to just careful attention to detail.  Compare
	{smart}, opposite: {brittle}.

	[{Jargon File}]

and compact.
It looks like a winner in this global-scoped eval issue. If you keep
fighting with that script insertion, and the jQuery technique does not
have any associated problems, then I'm going to call you bonkers on
this one. It's what you have been looking for, is not it?

And, what does jQuery.trim do? I can pretty well guess what
jQuery.browser does.

I do not know jQuery much.

Peter

From: Randy Webb

Date: Thursday, August 23, 2007

Peter Michaux said the following on 8/22/2007 6:18 PM:
wrote in message:

<snip>

and I am not sure what
setTimeout(data, 0) would've to do with any non-Safari browser. And, I
just plain *HATE* eval. Call me bonkers, I just prefer not to use it if
there is a non-eval alternative.
The big issue with eval is that it is slow and the code can not be
op