document.write() #33
Labels
question
Further information is requested
Comments
|
Hey @mindplay-dk, good question!
The answer seems to depend on the browser. I made a small test file to check it out: <!DOCTYPE html>
<html>
<head>
<script>
window.YETT_WHITELIST = [
new RegExp("https://unpkg.com/yett")
]
</script>
<script src="https://unpkg.com/yett"></script>
<script>
document.write(`
<script src="https://code.jquery.com/jquery-1.12.4.js"><\/script>
`)
</script>
</head>
<body>
<button onclick="window.yett.unblock()">Unblock</button>
<button onclick="alert(window.jQuery ? 'no' : 'yes')">does yett block scripts injected by document.write?</button>
</body>
</html>It works with On a side note, using With that said, a quick solution would be to group document.write contents into a single call: <!-- instead of: -->
<script src="https://unpkg.com/yett"></script>
<script>
document.write(`
<script src="https://code.jquery.com/jquery-1.12.4.js"><\/script>
`)
</script>
<!-- do: -->
<script>
document.write(`
<script src="https://unpkg.com/yett"><\/script>
<script src="https://code.jquery.com/jquery-1.12.4.js"><\/script>
`)
</script> |
|
These are all third-party scripts - whether or how they use I'm surprised this doesn't work in Chrome - I suspected this would be a problem in IE, but not in Chrome... 😶 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Just wondering, will this capture
document.write()statements?A lot of embeds and other snippets issue
document.write()injections synchronously in head or body during page-load.I'm wondering if
MutationObserverwould pick these up - and in IE11 in particular.Might be good to have test-coverage for this?
The text was updated successfully, but these errors were encountered: