Cannot add script node dynamically

Question

I am trying to attach a <script> node with the following code

<html>
<body>
<script src="http://ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js"></script>
<script>
  $('body').append('<script>alert(\'foo\');</script>');
</script>
</body>
</html>

I expect the code

alert('foo');

to be added an executed, but actually, the following string is added

');

What is happening here?

Because it ends the script tag earlier: stackoverflow.com/a/236106/142985 — Nathan
– Nathan, Commented Apr 24, 2014 at 7:00

kaytrance · Accepted Answer · 2014-04-24 07:03:08Z

4

You have to properly escape the slash character here and use doublequotes for foo:

<html>
  <body>
    <script src="http://ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js"></script>
    <script>
      $('body').append('<script>alert("foo");<\/script>');
    </script>
  </body>
</html>

answered Apr 24, 2014 at 7:03

kaytrance

2,8054 gold badges33 silver badges50 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

xdazz · Accepted Answer · 2014-04-24 07:03:13Z

3

You have to break </script> inside the string or it will considered as the end tag for <script>.

  $('body').append('<script>alert(\'foo\');</scr'+'ipt>');

answered Apr 24, 2014 at 7:03

xdazz

161k38 gold badges255 silver badges278 bronze badges

Collectives™ on Stack Overflow

Cannot add script node dynamically

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related