Allowing "javascript:xxx" frames

Koos Vriezen koos.vriezen at xs4all.nl
Sat Feb 26 15:04:27 GMT 2005


Hi,

Consider this testcase, both as local file and non-local (eg. cp to
public_html and http://localhost/~me/testcase.html) and see the
differences:
 <html>
  <frameset cols="25%,75%" >
   <frame src="javascript:'<HTML></HTML>'" name="toc">
   <frame src="javascript:'<HTML></HTML>'" name="body">
  </frameset>
 </html>

Most likely it's some accessing restriction. But it doesn't print a
warning, so maybe someone on this list can tell where this is blocked.
I don't think it should, no?

Koos




More information about the kfm-devel mailing list