Nifty script + Interesting problem: run javascript without script tags [modified]
-
Here's a nifty little script I built, almost by accident. Essentially, it takes a string of invisible characters and makes grow to full size in a cascading fashion. Feel free to use it in whatever you want: *************** //<!-- var timeout; function SizeShift(LetterNum) { Grow(LetterNum + 1, 0) if (LetterNum <= 18) { timeout = setTimeout('SizeShift('+(LetterNum + 1)+');', 100); } } function Grow(LetterNum, Size) { var D = document.getElementById(LetterNum); D.style.fontSize = Size; if (Size < 25) { timeout = setTimeout('Grow('+LetterNum+', '+(Size + 1)+');', 10); } } timeout = setTimeout('SizeShift(0);',100); //--> Code Project is Cool! ***************** So, here's the challenge: I want to use this script as a signature for message board-style posts on a site that doesn't accept certain tags, including at least , <LINK>, <IMG>, and <IFRAME>, evidently in an attempt to prevent malicious use. Of course, what's a wall good for if you can't find a way around it? Any ideas on how to make this happen? One approach I've been trying without success is to host the script and signature somewhere then import that page into the innerHTML of, say, a <SPAN> within the post. I can't quite make that one happen. Any other ideas? Proof of concept is requested, if possible. -- modified at 20:47 Friday 26th January, 2007 </x-turndown>
-
Here's a nifty little script I built, almost by accident. Essentially, it takes a string of invisible characters and makes grow to full size in a cascading fashion. Feel free to use it in whatever you want: *************** //<!-- var timeout; function SizeShift(LetterNum) { Grow(LetterNum + 1, 0) if (LetterNum <= 18) { timeout = setTimeout('SizeShift('+(LetterNum + 1)+');', 100); } } function Grow(LetterNum, Size) { var D = document.getElementById(LetterNum); D.style.fontSize = Size; if (Size < 25) { timeout = setTimeout('Grow('+LetterNum+', '+(Size + 1)+');', 10); } } timeout = setTimeout('SizeShift(0);',100); //--> Code Project is Cool! ***************** So, here's the challenge: I want to use this script as a signature for message board-style posts on a site that doesn't accept certain tags, including at least , <LINK>, <IMG>, and <IFRAME>, evidently in an attempt to prevent malicious use. Of course, what's a wall good for if you can't find a way around it? Any ideas on how to make this happen? One approach I've been trying without success is to host the script and signature somewhere then import that page into the innerHTML of, say, a <SPAN> within the post. I can't quite make that one happen. Any other ideas? Proof of concept is requested, if possible. -- modified at 20:47 Friday 26th January, 2007 </x-turndown>
-
What forum are you trying to hack use?
Brad Australian - Christian Graus on "Best books for VBscript" A big thick one, so you can whack yourself on the head with it.
It's actually an online correspondence gaming forum for a board game called Diplomacy. You can't get into the forum unless you join the game, so the address wouldn't help you much, but I bet most forums are similarly protected against potentially malicious posts.
-
It's actually an online correspondence gaming forum for a board game called Diplomacy. You can't get into the forum unless you join the game, so the address wouldn't help you much, but I bet most forums are similarly protected against potentially malicious posts.
tantiboh wrote:
but I bet most forums are similarly protected against potentially malicious posts.
No, every forum would have a slightly different stratagy. Maybe if you provided a link then we could see what forum they use.
Brad Australian - Christian Graus on "Best books for VBscript" A big thick one, so you can whack yourself on the head with it.