如何防止对JavaScript：URL进行空格编码？

Question

I'm trying to use the following as a URL that executes javascript:

javascript:var field = document.getElementsByName("actions[hide]"); + for (i = 0; i < field.length; i++)field[i].click();

However, the spaces get URL encoded when I bookmark it, replaced with %20 , which (for a reason unknown to me) causes the JS code not to work.

javascript:var%20field%20=%20unescape%20document.getElementsByName("actions[hide]");%20+%20for%20(i%20=%200;%20i%20<%20field.length;%20i++)field[i].click();

Answer 1

if you want to create a bookmarklet i would suggest you this site:

http://benalman.com/code/test/jquery-run-code-bookmarklet/

there is written that it is used for jquery code but you can also convert normal javascript with this generator. Or you can simplify use the jquery and convert your code from:

var field = document.getElementsByName("actions[hide]"); + for (i = 0; i < field.length; i++)field[i].click();

to

$('[name="actions[hide]"]').each(function() { $(this).click(); });

i use this script every time i create a new bookmarklet and i love it

EDIT: when you enter your code you must paste it without the "javascript:" text in front.

Answer 2

I didn't understand as well the purpose you mean for that javascript as url scheme.
Anyway if you put that string into the browse address bar to work within the current web page, probably it won't.
You can try to call an anonymous function:

<a href="javascript:(function() { var field = document.getElementsByName('actions[hide]'); for (var i = 0; i < field.length; i++) { field[i].click(); } })();">Click me</a>

Answer 3

Encoding spaces in javascript: URIs shouldn't (and doesn't in my experience) break scripts. The problem is most likely your + which is also a special character in URIs (it also means a space) but isn't being automatically converted by the browser as the character is allowed at that point in a URI.

You need to encode the + character as %2B (along with any other special characters you might have in the JS).