Bug 13221 – VitalSource Bookshelf should not pass return statements into stringByEvaluatingJavaScriptFromString

• Status: RESOLVED
• Resolution: INVALID
• Component: Evangelism

[Adele Peterson]

VitalSource Bookshelf should not pass return statements into stringByEvaluatingJavaScriptFromString.

While investigating this VitalSource Bookshelf bug:

http://bugs.webkit.org/show_bug.cgi?id=12587
REGRESSION: VitalSource Bookshelf registering for a new account fails in TOT

We realized that their application code was calling [WebView stringByEvaluatingJavaScriptFromString] with strings like:

"return document.forms[0].elements.length"

We used to allow this, but now we have error checking to make sure return statements are within a function, and this will throw a Javascript exception.

We are adding a workaround for this application, but we need to notify VitalSource, so they can change their code.

They seem to be using these calls to contruct a url string that contains the form elements' values.  But they should just be able to use the ObjC DOM calls to submit the form directly.

If they keep their current code, they should just send strings like "document.forms[0].elements.length"

[Adele Peterson]

<rdar://problem/5095515>