Closed
Bug 362397
Opened 19 years ago
Closed 19 years ago
non-terminated <script> tag should not execute
Categories
(Firefox :: File Handling, defect)
Firefox
File Handling
Tracking
()
RESOLVED
DUPLICATE
of bug 305873
People
(Reporter: hroehrig, Unassigned)
References
()
Details
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0
A script like
---
before
<script language="javascript" src="inside.js">
after
---
displays as "before inside after" in Firefox 1.5.x and 2.0, whereas IE6, IE7, Safari, and Opera do not execute inside.js and (with the exception of Opera) do not display "after".
I am told that HTML5 plans to make not executing the script and ignoring everything after <script> the required action.
You may even see this as a security problem, since something that Firefox treats as HTML may suddenly get interpreted as a script if a </script> gets added further down.
Reproducible: Always
Steps to Reproduce:
load http://hein.roehrig.name/unterminated-script-tag.html
Actual Results:
before inside after
Expected Results:
before
| Reporter | ||
Updated•19 years ago
|
OS: Windows XP → All
Hardware: PC → All
| Reporter | ||
Comment 1•19 years ago
|
||
FYI, the HTML5 proposal for <script> parsing is at
http://www.whatwg.org/specs/web-apps/current-work/#scriptTag
Comment 2•19 years ago
|
||
Already fixed on trunk.
*** This bug has been marked as a duplicate of 305873 ***
Status: UNCONFIRMED → RESOLVED
Closed: 19 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•