True as that may be, this doesn't really demonstrate that— it's just 535 different ways to access `location`. A regex would trivially disable every one. Of the things on that list.
Show me your trivial regex solution to this problem and I'll show you how to break it.
I mean, s/location//g will do the trick too, but I was aiming a little more generic.
Do not rely on regular expressions or blacklists to sanitize code for you. It will not end well.
Look, just read what I'm saying. I swear I know what I'm talking about, and I swear I'm not saying you can reliably sanitize JavaScript with a regex. Really.
This must be like the FizzBuzz thing— programmers just can't resist a challenge, even if it is explicitly marked as not being a challenge.
And thanks for the hscroll :P
/me happy
Odd, that FF wraps... maybe I'll look into it later today, I kinda wonder why.
Ah well. TIL not to poke FizzBuzz.