Sugama's Tech BLOG

I changed the entry subject format from 'javascript: subject' to 'javascript - subject' because the former example, which also appears to the HTML title tag, do something bad with amazon associate. The program delivers the subject infomation in querystring  and some security softwares on user's computer assumes the communication to be XSS.

Amazon's javascript generates URLs in following format.

http://rcm-jp.amazon.co.jp/e/cm?.......&ref-title=[HTML title]&........

The value is well escaped so it's technically right, but to keep up with the trend of the times, I have to abandon to put any phrases 'script:' in HTML title tag to counter speculation.