Dynamic loading of <script>

[lwc]

I have a code that adds dynamic text to a page:

document.getElementById("dynamic").innerHTML = text

However, sometimes the text contains actual javascript. It seems it won't run because the page already loaded.

Can you help me add a child, etc. to get it running? The steps are:

1. Display the part before the script.
2. Run the script.
3. Display the part after the script.

For example:

text = "display this text, run this code <script>alert('foobar')</script> and then display this text."

Thanks!

[A1ien51]

You can not add script tags via innerHTML. You would have to rip out the code and run it with eval. There are libraries that automatically do this.

Eric

[lwc]

Alright, I've programmed the solution myself:

<span id=dynamictext>hey</span><hr>
<input type=button onclick="bla(0)" value=Button0><hr>
<input type=button onclick="bla(1)" value=Button1><hr>
<input type=button onclick="bla(2)" value=Button2>
<script>
function bla(text) {
  if (text==0)
   text = 'hey there'
  else if (text==1)
    text = 'hey <script>alert("bla")</' + 'script> yo'
  else if (text==2)
    text= 'hey <script>alert("bla1")</' + 'script> yo <script>alert("bla2")</' + 'script> and more'
  theregex1 = new RegExp(/<script>[\s\S]+?[^<\/script>]<\/script>/ig)
  if (theregex1.test(text)) {
    theregex2 = new RegExp(/<script>([\s\S]+?[^<\/script>])<\/script>/i)
    thematches = text.match(theregex1)
    for (i=0;i<thematches.length;i++) {
      thematch = theregex2.exec(thematches[i])[1]
      eval(thematch)
    }
    text = text.replace(theregex1, "").replace(/\s\s+/, " ")
  }
  document.getElementById("dynamictext").innerHTML = text
}
</script>

[Declan1991]

theregex1 = new RegExp(/<script>[\s\S]+?[^<\/script>]<\/script>/ig)
  if (theregex1.test(text)) {
    theregex2 = new RegExp(/<script>([\s\S]+?[^<\/script>])<\/script>/i)

You don't need the new RegExp there. It makes more sense to use

theregex1 = /<script>[\s\S]+?[^<\/script>]<\/script>/ig;
  if (theregex1.test(text)) {
    theregex2 = /<script>([\s\S]+?[^<\/script>])<\/script>/i;

The object is useful for when you need to use a string to create the RegExp.

[lwc]

Thanks. BTW, why does this only work for the first catch:

  theregex = "<script>([\s\S]+?[^<\/script>])<\/script>"
  theregex1 = new RegExp(theregex, "gi")
  if (theregex1.test(text)) { // catches
    theregex2 = new RegExp(theregex, "i") // doesn't catch

?