Ran*_*lue 0 javascript chromium
浏览一些Chromium源(见第45ff行),我发现:
in_script_tag: function(code) {
return "<script>" + code + "</scr" + "ipt>";
},
Run Code Online (Sandbox Code Playgroud)
有谁知道为什么笔者选择"</scr" + "ipt>"了"</script>"?
<script>标签内部</script>无论发生在何处都会结束.
例:
<script>
alert('</script>');
// anything here will not be executed anymore
</script>
Run Code Online (Sandbox Code Playgroud)
原因很简单,浏览器对JavaScript字符串等一无所知,因此当它看到</script>它时总是关闭<script>标记.