Y
yawnmoth
<script>
a = "zzz:\nalert(1)";
eval(a);
</script>
Why does that work? This doesn't (not that I'd expect it to):
<script>
zzz:
aert(1);
</script>
So why does the first script work when the second one doesn't?
a = "zzz:\nalert(1)";
eval(a);
</script>
Why does that work? This doesn't (not that I'd expect it to):
<script>
zzz:
aert(1);
</script>
So why does the first script work when the second one doesn't?