Comments on: Extension Developers - Monitor Those Plugins http://starkravingfinkle.org/blog/2008/04/extension-developers-monitor-those-plugins/ Wed, 20 Aug 2008 10:25:58 +0000 http://wordpress.org/?v=2.5 By: Cweb http://starkravingfinkle.org/blog/2008/04/extension-developers-monitor-those-plugins/#comment-6129 Cweb Sat, 03 May 2008 23:54:22 +0000 http://starkravingfinkle.org/blog/2008/04/extension-developers-monitor-those-plugins/#comment-6129 Hi Mark, I'm trying to find a way to use the Firefox and/or MSHTML API's (separately of course) to detect when the javascript engine has been loaded. I thought you might have some pointers. I really would prefer to use MSHTML since the main consumer is IE, but Mozilla would be fine too. The situation is this - I have an HTML filter that cleans unsafe HTML and saves the 'safe' HTML separately. Safe HTML means there is no executable script - script blocks, no CSS script, no events, no javascript:alert() URI's. I'd like to build a tool to automatically consume the safe HTML files and determine if they are script-free by loading the HTML into the browser, walking the DOM and identifying when script-execution might happen with or without user-interaction. Do you know of any API for something like DoesScriptExistInThisPage() or another approach I should take? Hi Mark, I’m trying to find a way to use the Firefox and/or MSHTML API’s (separately of course) to detect when the javascript engine has been loaded. I thought you might have some pointers. I really would prefer to use MSHTML since the main consumer is IE, but Mozilla would be fine too.

The situation is this - I have an HTML filter that cleans unsafe HTML and saves the ’safe’ HTML separately. Safe HTML means there is no executable script - script blocks, no CSS script, no events, no javascript:alert() URI’s.

I’d like to build a tool to automatically consume the safe HTML files and determine if they are script-free by loading the HTML into the browser, walking the DOM and identifying when script-execution might happen with or without user-interaction. Do you know of any API for something like DoesScriptExistInThisPage() or another approach I should take?

]]>