Win a copy of Think Java: How to Think Like a Computer Scientist this week in the Java in General forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

iframe src='BLOCKED SCRIPT'

 
zb cong
Ranch Hand
Posts: 416
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hello,
in my jsp page, there is following lines:

<iframe id="calCover" src="BLOCKED SCRIPT'<html></html>';" scrolling="no" frameborder="0"
style="position:absolute;width:170px;height:146px;top:0px;left:0px;border:none;display:block;visibility:hidden;z-index:10">
</iframe>


i don't know what it means, it seems useless, who can explain to me?
otherwise, when i run loadrunner, it always complain 404 error "File not found: /BLOCKED SCRIPT", who can help? can i remove it? thanks
 
Bear Bibeault
Author and ninkuma
Marshal
Pie
Posts: 64830
86
IntelliJ IDE Java jQuery Mac Mac OS X
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
It's not something I've ever heard of, but a google search shows it in a number of online examples. But nowhere could I find any explanation of what it is supposed to do.

It looks like its intention is to provide inline markup for the body of the iframe, but I couldn't get it to do anything except 404 in any browser I tried (pretty much all but IE, as I don't have Windows).

It could be an IE-only extension as most of the examples I found were on .Net sites, but I have no idea. In any case, if it's not cross-browser, it shouldn't be used.
 
zb cong
Ranch Hand
Posts: 416
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
thanks, i have tried in IE and chrome, no error reported. and i have checked some document about iframe, it said the src property should Specify the URL of the document to show in an iframe, it can be file path or java script, i could not find any explain about "BLOCKED SCRIPT". and i find that it seems this iframe blocks are useless, because it does not insert any documents into the page yet.
 
Eric Pascarello
author
Rancher
Posts: 15385
6
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
BLOCKED SCRIPT normally means there is some filter that is removing what it thinks is XSS injection code.

Eric
 
Bear Bibeault
Author and ninkuma
Marshal
Pie
Posts: 64830
86
IntelliJ IDE Java jQuery Mac Mac OS X
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Ah, so it's an "after-the-fact" artifact, rather than something that will ever appear in source code.

So is this code the result of screen-scraping some other site?
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic