Closed Bug 362397 Opened 18 years ago Closed 18 years ago

non-terminated <script> tag should not execute

Categories

(Firefox :: File Handling, defect)

defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 305873

People

(Reporter: hroehrig, Unassigned)

References

()

Details

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0

A script like
---
before
<script language="javascript" src="inside.js">
after
---
displays as "before inside after" in Firefox 1.5.x and 2.0, whereas IE6, IE7, Safari, and Opera do not execute inside.js and (with the exception of Opera) do not display "after".

I am told that HTML5 plans to make not executing the script and ignoring everything after <script> the required action.

You may even see this as a security problem, since something that Firefox treats as HTML may suddenly get interpreted as a script if a </script> gets added further down.


Reproducible: Always

Steps to Reproduce:
load http://hein.roehrig.name/unterminated-script-tag.html

Actual Results:  
before inside after

Expected Results:  
before
OS: Windows XP → All
Hardware: PC → All
FYI, the HTML5 proposal for <script> parsing is at
http://www.whatwg.org/specs/web-apps/current-work/#scriptTag
Already fixed on trunk.

*** This bug has been marked as a duplicate of 305873 ***
Status: UNCONFIRMED → RESOLVED
Closed: 18 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.