13579 2007-05-03 17:12:42 -0700 window.location.assign(url) ignores "javascript:" type addresses 2007-05-03 17:44:20 -0700 1 1 1 Unclassified WebKit WebCore JavaScript 523.x (Safari 3) Mac OS X 10.4 RESOLVED WORKSFORME P2 Normal --- 1 ian.eng.webkit webkit-unassigned fishd oldest_to_newest 11295 0 ian.eng.webkit 2007-05-03 17:12:42 -0700 window.location = "javascript:alert('hello world');"; displays the alert window. window.location.assign("javascript:alert('hello world')") does not. It looks like a systematical pattern in kjs_window.cpp that ignores requested urls that start with 'javascript:'. Other browsers support window.location.assign('javascript:...'); 11299 1 mrowe 2007-05-03 17:33:28 -0700 This works for me in the latest nightly build. <script type="text/javascript"> window.location.assign('javascript:alert("Hi")'); </script> 11300 2 ian.eng.webkit 2007-05-03 17:35:53 -0700 After re-thinking, it might have its purpose. This can restrict some type of XSS attack. 11301 3 ian.eng.webkit 2007-05-03 17:44:20 -0700 Updated my tree, and it works fine. (In reply to comment #1) > This works for me in the latest nightly build. > > <script type="text/javascript"> > window.location.assign('javascript:alert("Hi")'); > </script> >