waypoints icon indicating copy to clipboard operation
waypoints copied to clipboard

Infinite: parseHTML strips out script tags by default

Open aleemb opened this issue 3 years ago • 0 comments

In Infinite.js parseHTML strips out <script> tags by default:

var $data = $($.parseHTML(data))

In my use-case I'd prefer:

var $data = $($.parseHTML(data, undefined, true))

This makes it very handy to include any JS code (analytics, ads, etc) directly in the output. I'm not sure why this is not the default behavior for Infinite JS since the HTML is trusted and it's probably desirable. Maybe you could include an optional flag to allow <script> tags it if there are reasons to exclude it in the first place?

aleemb avatar Oct 13 '22 03:10 aleemb