Help: Imbedded </script> within a document.write()

[Mike Daniel]

I am attempting to use document.write( pageVar) that displays a new html page
within a pop-up window and the popup is failing. Also note that pageVar is
a complete HTML page containing other java scripts.

Being a javascript newbie and after significant testing, I suspect that the
document.write fails after finding a </script> within pageVar.

Does a trick exist that enables one to slightly alter pageVar whereby
enabling document.write( pageVar) to display a complete HTML page that
contains other javascripts?

Thanks,
Mike.

[Greg]

Re: Help: Imbedded &lt;/script&gt; within a document.write( )

If I understand you correctly, then this is the same issue I encountered
last year, and I managed to work around it.

Write it in several parts,

response.write( "<scr")
response.write( "ipt>")

This is ugly and terrible, but it works.

Gets really messy when you've got vbscript writing javascript which is
writing html dynamically but... sometimes we have to play the cards we
are dealt.

I hope that helps you out.
Greg.

Mike Daniel wrote:[color=blue]
> I am attempting to use document.write( pageVar) that displays a new html page
> within a pop-up window and the popup is failing. Also note that pageVar is
> a complete HTML page containing other java scripts.
>
> Being a javascript newbie and after significant testing, I suspect that the
> document.write fails after finding a </script> within pageVar.
>
> Does a trick exist that enables one to slightly alter pageVar whereby
> enabling document.write( pageVar) to display a complete HTML page that
> contains other javascripts?
>
> Thanks,
> Mike.
>
>[/color]

[Lasse Reichstein Nielsen]

Re: Help: Imbedded &lt;/script&gt; within a document.write( )

"Mike Daniel" <manddd@cox.net > writes:
[color=blue]
> I am attempting to use document.write( pageVar) that displays a new html page
> within a pop-up window and the popup is failing. Also note that pageVar is
> a complete HTML page containing other java scripts.[/color]

When you have a script element, it starts at the <script ...> tag and
ends at the *first* occurence of "</" after that. In practice, most
browsers are less picky, and doesn't stop until the first occurence
of "</script>".

So, if you have:
<script type='text/javascript">
var foo = "</script>";
</script>
the script element ends prematurely.

The recommended solution is to write:
var foo = "<\/script>";
This escapes the forward slash, which doesn't matter in Javascript
strings, but seen from the HTML parser's perspective, there is no
longer a "</" too many.


In your case, you have a string containing HTML code to be written.
That code contains script tags. My guess is that one of these
script tags contain a document.write as well, and an HTML script
end tag.

So, whereever you define pageVar, you need to make sure that
when it is written to another page, it writes an escaped slash.

That is, if pageVar contains
' ... "</script>" .... '
(a string to be written on the second page), you must change it
to:
' ... "<\\/script>" ... '
The double backslash means that the string contains a backslash,
and that it is written correctly to the other page.

Good luck
/L
--
Lasse Reichstein Nielsen - lrn@hotpop.com
Art D'HTML: <URL:http://www.infimum.dk/HTML/randomArtSplit. html>
'Faith without judgement merely degrades the spirit divine.'

[HikksNotAtHome]

Re: Help: Imbedded &lt;/script&gt; within a document.write( )

In article <Bg%8b.54261$cj 1.31898@fed1rea d06>, "Mike Daniel" <manddd@cox.net >
writes:
[color=blue]
>Being a javascript newbie and after significant testing, I suspect that the
>document.wri te fails after finding a </script> within pageVar.
>
>Does a trick exist that enables one to slightly alter pageVar whereby
>enabling document.write( pageVar) to display a complete HTML page that
>contains other javascripts?[/color]

Escape the / in the script tag:

document.write( '<\/script>')

It is well known about by some, not by others.
--
Randy

[Mike Daniel]

Re: Help: Imbedded &lt;/script&gt; within a document.write( )

Additional details:

The original HTML document is generated on a remote system via a servlet
requests. The servlet requests from the remote system a HTML pepared menu
and wraps the returned menu with XML, then the servlet requests from the
remote system a HTML constructed report and wraps it with report specific
XML. The same servlet concatenates the two documents together with
appropriate beginning and ending XML tags (then passes it back into Novell's
NPS/eXtend Directory portal servlet). The portal servlet then unwraps (I
think) the XML and sends the combinded HTML document to the browser. The
browser displays the menu on one window and (intentions are) the report is
supposed be displayed in a browser type popup window. The main window
contains the popup javascript. In the same document, the popup javascript
is called and (at this time) the entire HTML document has been inserted into
the <SCRIPT>...docu ment.write("<HT ML> ...<script>
....</script>...</HTML>")</script>, and can be seen via the browsers view
source. The pageVar referenced in the original request is this inserted
HTML document wrapped with double quotes. At this time, the HTML document
contains only single quotes as converted by servlet after receiving pageVar
from remote system. My thoughts are to eliminate web browser and javascript
confusion.

My thoughts at this time is to correct the report HTML document's script
immediately after the servlet receives it from the remote system. Now I am
having trouble coding the servlet to appropriately alter </servlet> to
<\\/servlet> due to Java escape code "conflict" originating within the
servlet. I was using pageVar.replace All("</script>","<\\/script>"); but
this becomes a <\/script> as seen in the view source. Now the report window
appears but no report data follows. If <\/script> replaces <\\/script>, the
java compiler complains.

What tricks can be used to replace "</script>" to look something
"<\/script>" within the java servlet?

Mike.

"Lasse Reichstein Nielsen" <lrn@hotpop.com > wrote in message
news:znh755cx.f sf@hotpop.com.. .[color=blue]
> "Mike Daniel" <manddd@cox.net > writes:
>[color=green]
> > I am attempting to use document.write( pageVar) that displays a new html[/color][/color]
page[color=blue][color=green]
> > within a pop-up window and the popup is failing. Also note that pageVar[/color][/color]
is[color=blue][color=green]
> > a complete HTML page containing other java scripts.[/color]
>
> When you have a script element, it starts at the <script ...> tag and
> ends at the *first* occurence of "</" after that. In practice, most
> browsers are less picky, and doesn't stop until the first occurence
> of "</script>".
>
> So, if you have:
> <script type='text/javascript">
> var foo = "</script>";
> </script>
> the script element ends prematurely.
>
> The recommended solution is to write:
> var foo = "<\/script>";
> This escapes the forward slash, which doesn't matter in Javascript
> strings, but seen from the HTML parser's perspective, there is no
> longer a "</" too many.
>
>
> In your case, you have a string containing HTML code to be written.
> That code contains script tags. My guess is that one of these
> script tags contain a document.write as well, and an HTML script
> end tag.
>
> So, whereever you define pageVar, you need to make sure that
> when it is written to another page, it writes an escaped slash.
>
> That is, if pageVar contains
> ' ... "</script>" .... '
> (a string to be written on the second page), you must change it
> to:
> ' ... "<\\/script>" ... '
> The double backslash means that the string contains a backslash,
> and that it is written correctly to the other page.
>
> Good luck
> /L
> --
> Lasse Reichstein Nielsen - lrn@hotpop.com
> Art D'HTML: <URL:http://www.infimum.dk/HTML/randomArtSplit. html>
> 'Faith without judgement merely degrades the spirit divine.'[/color]

[Douglas Crockford]

Re: Imbedded &lt;/script&gt; within a document.write( )

> I am attempting to use document.write( pageVar) that displays a new html page[color=blue]
> within a pop-up window and the popup is failing. Also note that pageVar is
> a complete HTML page containing other java scripts.
>
> Being a javascript newbie and after significant testing, I suspect that the
> document.write fails after finding a </script> within pageVar.[/color]

Put a backslash in front of the slash.

document.write( '<\/script>');

JavaScript will happily ignore the backslash, which is at the same time
preventing the browser's hopeless confusion.

jslint catches mistakes like these.

http://www.crockford.com/javascript/lint.html

[Dr John Stockton]

Help: Imbedded &lt;/script&gt; within a document.write( )

JRS: In article <20030914191541 .12631.00001098 @mb-m28.aol.com>, seen in
news:comp.lang. javascript, HikksNotAtHome <hikksnotathome @aol.com>
posted at Sun, 14 Sep 2003 23:15:41 :-[color=blue]
>In article <Bg%8b.54261$cj 1.31898@fed1rea d06>, "Mike Daniel" <manddd@cox.net >
>writes:
>[color=green]
>>Being a javascript newbie and after significant testing, I suspect that the
>>document.writ e fails after finding a </script> within pageVar.
>>
>>Does a trick exist that enables one to slightly alter pageVar whereby
>>enabling document.write( pageVar) to display a complete HTML page that
>>contains other javascripts?[/color]
>
>Escape the / in the script tag:
>
>document.write ('<\/script>')
>
>It is well known about by some, not by others.[/color]

In particular, IIRC, it is well known about by W3's free off-line HTML
tester TIDY.

Anyone who produces HTML for the WWW without checking it with something
like TIDY is, at best, an optimist.

http://www.w3.org/People/Raggett/tidy/

or http://tidy.sourceforge.net/

--
© John Stockton, Surrey, UK. ?@merlyn.demon. co.uk Turnpike v4.00 IE 4 ©
<URL:http://jibbering.com/faq/> Jim Ley's FAQ for news:comp.lang. javascript
<URL:http://www.merlyn.demo n.co.uk/js-index.htm> JS maths, dates, sources.
<URL:http://www.merlyn.demo n.co.uk/> TP/BP/Delphi/JS/&c., FAQ topics, links.