for this document:
----------------
<html>
<script type="text/javaScript" language="javascript">
document.write('<input type="hidden" name="oRef" value="' +
document.referrer.replace(/"/gi,'') + '" />');
</script>
aaa
</html>
-----------------
setting disable-script = on
produces the following:
----------------------
<html>
<!-- WWWOFFLE (disable-script) - script type="text/javaScript"
language="javascript" -->
<!-- WWWOFFLE (disable-script) - ... -->
----------------------
this is wrong.
the real world example is here:
http://www.microsoft.com/downloads/details.aspx?FamilyID=aea55f2f-07b5-4a8c-8a44-b4e1b196d5c0&displaylang=en
looks like parser cannot detect the script end
--
Max
