undefined | Better HN

0 pointsjdnier8y ago0 comments

Works in Firefox, not in Chrome (at least on MacOS).

0 comments

What about

  data:text/html,<script>alert(2+2)</script>

?

ConfucianNardin8y ago

Works in both Chrome and Firefox.

tomc19858y ago

Doesn't work in Chrome (edit: or Firefox for that matter) for Windows either... that's a shame. Abusing javascript: is a really useful trick for lots of little hacks.

striking8y ago

It's also an attack vector for hacks. You can enable it on some browsers if you please, but having it off by default is sensible...

johnhenry8y ago

Works if you type it out. If you paste it, the "javascript:" part will be omitted.

abhinickz8y ago

Above works even if you paste it.

j / k navigate · click thread line to collapse