Comments on: onreadystatechange http://www.thespanner.co.uk/2009/04/08/onreadystatechange/ Javascript blog with messed up syntax inside Thu, 26 Jan 2012 01:38:34 +0000 hourly 1 By: Kai Sellgren http://www.thespanner.co.uk/2009/04/08/onreadystatechange/#comment-1527 Kai Sellgren Thu, 09 Apr 2009 17:20:17 +0000 http://www.thespanner.co.uk/?p=401#comment-1527 I just wrote a big reply, but it appeared to be spam... Great. You should fix your site. I just wrote a big reply, but it appeared to be spam…

Great.

You should fix your site.

]]> By: Gareth Heyes http://www.thespanner.co.uk/2009/04/08/onreadystatechange/#comment-1525 Gareth Heyes Wed, 08 Apr 2009 13:48:13 +0000 http://www.thespanner.co.uk/?p=401#comment-1525 it should be onreadystatechange sorry I must have been tired it should be onreadystatechange sorry I must have been tired

]]> By: Klaas http://www.thespanner.co.uk/2009/04/08/onreadystatechange/#comment-1524 Klaas Wed, 08 Apr 2009 13:44:28 +0000 http://www.thespanner.co.uk/?p=401#comment-1524 Hey, I've tried this in IE6 and IE8 but can not reproduce it. Even the <script onreadystate=alert(1)> didn't work for me. Can you explain a bit more how you achieved it? Otherwise I would say IE is not vulnerable... Hey,
I’ve tried this in IE6 and IE8 but can not reproduce it. Even the <script onreadystate=alert(1)> didn’t work for me.

Can you explain a bit more how you achieved it? Otherwise I would say IE is not vulnerable…

]]>