Ticking certainly, however my dreadful js tells me that whatever whacky
functions I've made can be parameterised-in-a-template to be received by a
t5 component.

Extract their name (interface like) or some other more integrated language
binding thing..

Linking them within tapestry and it sounds like mod_perl mod_php mod_jquery
mod_app

In the case of a "calendar app" using bootstrap and joda time, say an
interface had inXDays() and the html day div highlights or pops up an edit
bubble, and that edit bubble had the
next+cool+mobile+version+of+a+js+gesture+framework, a la today's WYSIWYG
widgets.  Gesture or camera, with websockets in html5, those divs are gonna
need some kind of policy applied in internetworking projects.

Js abstraction sounds timely, will be interesting to see what can happen in
html5 land.

Bringing it back to the issue at hand, a <t:Script src="alert(hello)" />
that could wrap the ugly bits at least. Java class stuff for
managed/designed/schedulable script dev though... A dreamable maven task -
although I'd do it in bash separately cos its quicker and simpler and
delegatable and heaps more l33t :P

Cheers
Chris




On 06/02/2014 9:21 pm, "Lance Java" <lance.j...@googlemail.com> wrote:

> In theory, the data URL approach sounds perfect.
>
> But in reality we'd be swapping this:
>    <script>alert('hello');</script>
>
> For this:
>    <script src="data:text/javascript;charset=utf-8,alert('hello');" />
>
> As you mentioned, it's likely that at least on browser won't support this
> (I'm looking at you IE!). As I said, I'm not sure it actually achieves
> anything in terms of security (apart from ticking a box).
>

Reply via email to