4 ms·

Missing closing tags in html no.

• lostmsu 5mo ago
  I could imagine a page where cutting HTML would cause it be a yes (not exact JS). <script> setTimeout(10000, () => { safeEval(<some user input>); }); </script> <script> window.safeEval = code => eval(code); </script> <!-- cut the page here --> <!-- the prev and next tags around this comment could be combined in one and cut in the middle if the browser autocloses them and treats as valid script after --> <script> <!-- safety fixed! --> const notTooSafe = window.safeEval; window.safeEval = code => { if (code.any(c => !c.isDigit())) throw "unsafe"; return notTooSafe(code); }; </script>
  • a_t48 5mo ago
    Parent poster was talking about the latter half of a page being missing, rather than a chunk out of the middle, I believe.
    • lostmsu 5mo ago
      If the script blocks are in the end, how would browser know there's no "latter half of a page"?
      • a_t48 5mo ago
        Aha, now I get it. That's a neat idea.