Re: Allowing JavaScript injection using innerHTML

2009-09-23 Thread Thomas Broyer
On 23 sep, 16:50, JohnJ wrote: > Thanks for you post Thomas.  You're right it's only working for me w/ > JQuery.  I have created a wrapper method that uses JQuery under the > hood. > > It *seems* to work. > > Altho, Now it appears I have a display issue where it the embedded > gadget is the onl

Re: Allowing JavaScript injection using innerHTML

2009-09-23 Thread JohnJ
Thanks for you post Thomas. You're right it's only working for me w/ JQuery. I have created a wrapper method that uses JQuery under the hood. It *seems* to work. Altho, Now it appears I have a display issue where it the embedded gadget is the only thing displayed on the page (my host page seem

Allowing JavaScript injection using innerHTML

2009-09-22 Thread JohnJ
I would like to allow the following... (I know this could cause XSS issues but the users of this system are trusted). DOM.getElementById('someid').setInnerHTML("alert('hello!');"); If run this in hosted mode it appears to do nothing. If I compile and browse this with Firefox/Firebug it looks lik