We have <script>, <noscript> and where is <noparse> ?
Okay, so I'm making this site, and I though that it would be good to let people use some HTML tags, perhaps CSS and other stuff that browsers have to offer us, without need for crappy BB code. But then I would have to worry a lot about XSS. And suddenly, this came to me - <noparse> !
For example <noparse>"Some non-suspicious content goes <body onload=alert('Your mine!')> here <img src="some.png" alt=some" />"</noparse> would produce "Some non-suspicious content goes here (some.png image)" without alerting 'Your mine!'.
Of course there is still need to make sure, that this tag wouldn't be closed by attacker in a place we didn't planned for, but hey - thats much less to worry about.
--paziek 18:09, 16 May 2008 (PDT)
A quick intro to JS
This is the kind of information we need at the Getting started page. --Nickolay
- Depends on your definition of OOP. Strictly speaking, it is heavily object-oriented in that everything is treated as an object (with the exception of raw values such as strings and numbers). Sure it does not have a class-based OOP, but it does have prototype-based OOP, and that's OOP nonetheless. JS can hack up classes with private member support, although protected member support is far harder to implement. JS has prototype-based inheritance. --Maian 23:09, 6 November 2005 (PST)
- Well, my definition of OOP includes simplicity of expression. I do agree JS is OO, but I don't agree it is an OO language. Although, objects in JS are simple and powerfull (dynamic interfaces, for instance), expressing simple and common constructs in JS is more alike hacking than "elegant" (for a matter of speaking) coding. OOP in JS shows how hard is to achieve minimal encapsulation. In summary, I think there's more needed to be an OO language than the mere use of objects. Regards, Manu. Manu 08:12, 9 November 2005 (PST)
This is probably not the right place to discuss web counters, but I haven't been at the dev-moz wiki long enough to figure out the right place -- where is a better place? --DavidCary 14:38, 9 Jul 2005 (PDT)
One free web counter service asks me to use this lump of code:
// --> </script> <noscript>
Also, I see that it is ever so careful to set "p" to the proper value ... then it never uses "p". How strange.
Don't think this as right place to mention this issue , but still not found any to mention, so this is here.
--mangesh.khairnar 15:15, 9 Dec 2009 (PDT)
There is no way to make the confirm box show "Yes" and "No" button and this really creates a problem where there is need.