Not scoping a javascript variable by default looks to the window object. Beyond that, the browser can start guessing for you like IE, which can be inflexible or demand you tell it what to do correctly. That's an old argument though... :)
Scoping variables in CF works the same way. Not scoping CF variables can allow an attacker to set variables from the url if they know your variable names. Also scoping improves performance. > As far as the javascript goes, I wasn't fully scoping my form name. I > replaced formname with document.formname and my javascript works fine in > all netscapes. I guess this is more strict but imagine if you had to > code ColdFusion like that. ______________________________________________________________________ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/[email protected]/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
