http://bugs.jqueryui.com/ticket/8239
It turns out this same issue occurring in Adobe Air is the example bug they link to from their "how to submit a bug" page. http://bugs.jqueryui.com/ticket/3945 2012/3/30 ๏̯͡๏ Jasvir Nagra <[email protected]>: > > > On Fri, Mar 30, 2012 at 3:44 PM, gaz Heyes <[email protected]> wrote: >> >> On 30 March 2012 22:35, Mike Stay <[email protected]> wrote: >>> >>> Parsing these onclick handlers would be easy. The trouble is that the >>> onclick handler will run in the context of the host page, so the html >>> sanitizer would need to be able to construct a function that closes >>> over the right guest frame's imports. >> >> >> I had this problem and I think all I did was to call apply/call to the >> handler and pass the dom object as the first argument. > > > Right. We would also need to parse strings, integers and "this" arguments. > -- Mike Stay - [email protected] http://www.cs.auckland.ac.nz/~mike http://reperiendi.wordpress.com
