3 ms·
nope, in this case the image will be interpreted as an image, not a script.
by AndyKelley 14y ago
nope, in this case the image will be interpreted as an image, not a script.
- jack-r-abbit 14y agoRight. I just took the example squirrel page, saved it, altered the comment section of the image to insert some javascript code alert('Hello') and opened it in my browser. It works but only if it is interpreted as html. So you'd need to be able to control it more.