はてなブックマーク

Introduction The Resolution of Property Names on Objects Assignment of Values Reading of Values Identifier Resolution, Execution Contexts and scope chains The Execution Context scope chains and [[scope]] Identifier Resolution Closures Automatic Garbage Collection Forming Closures What can be done with Closures? Example 1: setTimeout with Function References Example 2: Associating Functions with Ob

Another day, another XSS flaw, this one in Google again, but this is a little more interesting than the normal ones, what this one shows is how JSON results add an extra vector to attack that might be missed by your QA team. The problem here was that the JSON was returned with a mime-type of text/html, a browser will render that as if it was an HTML page, even if it's really just a javascript snip

This RDF parser is designed to run in a web-browser or SVG browser, allowing you to process RDF on the client. The parser isn't complete, there's no support for various bits of the spec, and isn't all that fast, especially with large XML/RDF files. I've found it quite useful though for simple querying. The parser is generally tested and expected to work in Adobe SVG Viewer, Batik's Squiggle, Inter

1 Meta-FAQ meta-questions 1.1 Which newsgroups deal with javascript? 1.2 What questions are on-topic for comp.lang.javascript? 1.3 What should I do before posting to comp.lang.javascript? 1.4 Why was my post not answered? 2 Language Overview 2.1 What is ECMAScript? 2.2 What is JScript? 2.3 What is the Document Object Model (DOM)? 2.4 Internationalisation and Localisation in javascript 2.5 What doe