mathie's bits

<br /> <script type="text/javascript"> if(document.createStyleSheet) { document.createStyleSheet('http://server/stylesheet.css'); } else { var styles = "@import url(' http://server/stylesheet.css ');"; var newSS=document.createElement('link'); newSS.rel='stylesheet'; newSS.href='data:text/css,'+escape(styles); document.getElementsByTagName("head")[0].appendChild(newSS); } </script><br />

Issue: innerHTML simply writes HTML as a string; it doesn’t call the javascript interpreter to parse and execute any scripts that are part of the string

Reference: http://www.webmasterworld.com/forum91/2912.htm

Solution: manually find these scripts inside the text string and append them to the document
<br /> $vPat = new RegExp(‘<script .+>([^<]+)</script>','g');<br /> RegExp.lastIndex = 0; // making sure<br /> while (($vResult=$vPat.exec($vTxt))!=null) {<br /> for (var i=1;i<$vResult.length;i++) { var js = document.createElement("script"); js.setAttribute("type","text/javascript"); js.text = $vResult[i]; document.getElementById($vDivID).appendChild(js); } // rof } // rof

Instead: “find . -name ‘abc*’ | xargs rm”

Pretty cool technology but probably only good at catching those that stupidly enough to copy the whole paper.