Confirmed users
461
edits
SummerOfCode/2012/UserCSP/WeeklyUpdates/2012-08-06: Difference between revisions
Jump to navigation
Jump to search
SummerOfCode/2012/UserCSP/WeeklyUpdates/2012-08-06 (view source)
Revision as of 09:33, 10 August 2012
, 10 August 2012→Tuesday, {{#time:d F|{{SUBPAGENAME}} +1 day}}
| Line 10: | Line 10: | ||
=== Tuesday, {{#time:d F|{{SUBPAGENAME}} +1 day}} === | === Tuesday, {{#time:d F|{{SUBPAGENAME}} +1 day}} === | ||
* Tested inline Eval() feature added to add-on UI with a webiste I created in VM. | |||
* I setup VM running "www.example.com" website. Its inlineEval.html page is as follows: | |||
<html> | |||
<body> | |||
<a href="javascript:eval(alert('hi'));" >Click here </a> | |||
</body> | |||
</html> | |||
When I clicked on "Click here" button it showed alert prompt with text 'hi'. | |||
After I disabled inline Eval for the website, the prompt was disallowed, which is the expected result. | |||
=== Wednesday, {{#time:d F|{{SUBPAGENAME}} +2 days}} === | === Wednesday, {{#time:d F|{{SUBPAGENAME}} +2 days}} === | ||