Hmm, I can't reproduce what he claims by only looking at the cached version with... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

jannes on Sept 8, 2011 | parent | context | favorite | on: Firefox and IE's "View source" can be spoofed to s...

Hmm, I can't reproduce what he claims by only looking at the cached version without images and source code.

I especially don't understand this part:

  When you use document.write outside of a script tag embedded inline in
  the page [...]

What is "outside of a script tag embedded inline in the page" supposed to mean?

dave1010uk on Sept 8, 2011 [–]

What that means (though is not how I would word it) is a document.write that is called asynchronously. The post uses an ajax request to do it but I've recreated it here [1] like this:

    setTimeout(function() {
      document.write('foo');
      document.close();
    }, 1);

[1] http://taskthere.com/viewsource/

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact