[thelist] In memory browser to evaluate a DOM after JS has been applied?

[Matt Warden]

On Wed, May 13, 2009 at 12:50 PM, ivo <cervantes_vive at yahoo.com> wrote:
> I have an interesting problem I am trying to solve. I have a set of HTML pages onto which clients can add their own HTML & JS. The client HTML & JS can only be to modify the page DOM for presentation purposes. What I need to check for is if the client HTML & JS attempts to include any additional scripts or iframes. Checking the HTML document for script tags and iframes is straightforward but checking the JS fragments included on the page so that they dont dynamically build these tags or that they do ajax calls is challenging.
>

I don't know whether this is feasible based on your business problem,
but you could simply take the approach of overriding the appropriate
javascript DOM methods. You may have an issue with .innerHTML, though.


-- 
Matt Warden
Cincinnati, OH, USA
http://mattwarden.com


This email proudly and graciously contributes to entropy.