Re: M2: protect embedded javascript against DollarDot Plugin
Oliver Paukstadt <[email protected]>
| Newsgroups | gmane.comp.web.mason.user |
|---|---|
| Message-ID | <[email protected]> |
On Wed, 2012-04-11 at 10:00 -0700, Jonathan Swartz wrote: > On Apr 11, 2012, at 9:57 AM, Oliver Paukstadt wrote: > > > On Thu, 2012-04-05 at 10:53 -0500, Jonathan Swartz wrote: > >> Oliver - in answer to your original question, I don't have any good ideas about the best way to "escape" $. in code, but I'm open to ideas you have and would be willing to put some kind of escaping syntax in, as long as it didn't break something else in the process :) > > I think best is what Bill suggested: > > If I need to embed javascript/jquery code into html I can use the long > > syntax jQuery.whatever(). > > Hmm, ok. Feels like a defeat though. :) The $. syntax probably came into my head because I had been using jquery recently - didn't consider the possibility that it would conflict. > If you need a challenge: a) improve the regexp ;-) b) implement a possibility to disable the Plugin on an specific component src file without interfering with the inheritance. Oliver -- Oliver Paukstadt <[email protected]> ------------------------------------------------------------------------------ Better than sec? Nothing is better than sec when it comes to monitoring Big Data applications. Try Boundary one-second resolution app monitoring today. Free. http://p.sf.net/sfu/Boundary-dev2dev