With this syntax we should allow arbitrary unquoted javascript
statements as well.

As example:
<a onmouseover=test=function(str){document.write(str)};test();
onmouseout=...>

Is it OK ?
generally HTML parsers accept everything before next blank as the value if quotes are missing. This is not really 'ok' but there is nothing better to do

Armel


_______________________________________________ Scintilla-interest mailing list [email protected] http://mailman.lyra.org/mailman/listinfo/scintilla-interest

Reply via email to