With this syntax we should allow arbitrary unquoted javascript
statements as well.
As example:
<a onmouseover=test=function(str){document.write(str)};test();
onmouseout=...>
Is it OK ?
generally HTML parsers accept everything before next blank as the value if
quotes are missing. This is not really 'ok' but there is nothing better to
do
Armel
_______________________________________________
Scintilla-interest mailing list
[email protected]
http://mailman.lyra.org/mailman/listinfo/scintilla-interest