Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with jquery
Search options answers only
not deleted
user 98538
jQuery is a JavaScript library used for DOM manipulation.
2
votes
Accepted
DOM based XSS: jQuery("#HiddenReferral").val(jQuery(location).attr('href'));
and not the HTML source, something like this is completely safe in JavaScript:
obj.value = '" onClick="evilCode();';
obj.value = '"><script>evilCode();</script>';
The main (but probably not only) jQuery …
- 65.8k
5
votes
How to audit JavaScript written by someone else before including it on my site?
A backdoor in jQuery would have been discovered by now, but one in a small obscure library might not.
If that is not good enough for you, the next step is to go through the code. …
- 65.8k
6
votes
Accepted
Is there a possability to inject XSS into the jQuery attr function?
What jQuery actually does when you use attr(name, value) is to call setAttribute(name, value) on the relevant DOM elements. Not at home in the jQuery source, but I think this is the relevant part. …
- 65.8k
9
votes
Accepted
Is Content Security Policy only enforced during initial rendering?
Problem 2: unsafe-eval
To load the script, you use jQuery .html(). Somewhere deep in the jQuery source code (line 343 to be exact) it makes a call to the good old eval(). … Also do note that this is not an issue with how CSP works, but with how jQuery works. …
- 65.8k