Trusted Site Not So Trusted

[loganfoster]

I have a script that uses createelement to insert new rows into a page. Those inserted rows also have onchange events that fire, validating the identity of an account. The problem is that while pre-rendered rows (ones actually embedded into the HTML) will fire the onblur event, while any rows added via the javascript function will not even pop up an alert box.

The site is added to trusted sites, and active scripting is working on that zone. The bizarre thing is that if I set the internet zone to allow active scripting, events can fire from the inserted rows without any problem. But as soon as that is turned back to disable (necessary in this company) then those inserted rows do not work anymore.

Here is the function in question:

function addRow(table_id, neighborhood, agent_id, ledger_type, ledger_type_label)
{
    var tbody = document.getElementById(table_id).getElementsByTagName("tbody")[0];
    var row = document.createElement("TR");
    row.id='add_row_'+document.getElementById('additionalRowCount').value;
    document.getElementById('additionalRowCount').value=document.getElementById('additionalRowCount').value+1;
    row.style.backgroundColor='#F6F6f6';
 
    var cell1 = document.createElement("TD");
    var inp1 =  document.createElement("<INPUT TYPE='text' value='' size='24' maxlength='24' name='ledger_num"+ledger_type+"[]' class='textfield1' id='textaddMsgRow"+row.id+"' onChange='checkAccountNumber(this.value, \""+neighborhood+"\",\"addMsgRow"+row.id+"\",\""+agent_id+"\",\""+ledger_type_label+"\")'>");
    var lineBreak = document.createElement("BR");
    var accountDescSpan = document.createElement("span");
    accountDescSpan.id="addMsgRow"+row.id+"_desc";
    cell1.width="190";
    cell1.valign="top"
    cell1.appendChild(inp1);
 
    var lookupLink=document.createElement("a");
    lookupLink.href="javascript:MM_openBrWindow('lookup/lookup_account_number.php?company="+neighborhood+"&fromID=addMsgRow"+row.id+"&ledger_type="+ledger_type_label+"','lookup','width=480,height=380');void(0)";
 
    var lookupImage=document.createElement("IMG");
    lookupImage.src="../../../images/buttons/icon_table.gif";
    lookupImage.border="0";
    lookupImage.width="16";
    lookupImage.height="16";
 
    lookupLink.appendChild(lookupImage);
    cell1.appendChild(lookupLink);
    cell1.appendChild(lineBreak);
    cell1.appendChild(accountDescSpan);
 
    var cell2 = document.createElement('<TD width="20" valign="top">');
    var inp2 =  document.createElement("INPUT");
    inp2.type="text";
    inp2.value="";
    inp2.size="10";
    inp2.maxlength="10";
    inp2.name="ledger_amount"+ledger_type+"[]";
    inp2.className="textfield1";
    //cell2.width="20";
    //cell2.setAttribute("valign","top");
    cell2.appendChild(inp2);
 
    var cell3 = document.createElement('<TD width="50" valign="top">');
    var inp3 =  document.createElement('<INPUT type="text" value="" size="24" maxlength="30" name="ledger_explanation'+ledger_type+'[]" class="textfield1">');
    /*inp3.type="text";
    inp3.value="";
    inp3.size="24";
    inp3.maxlength="30";
    inp3.name="ledger_explanation[]";*/
    inp3.className="textfield1";
    //cell3.width="50";
    //cell3.valign="top"
    cell3.appendChild(inp3);
 
    var cell4 = document.createElement('<TD width="90" valign="top">');
    var inp4 =  document.createElement("INPUT");
    var inp4 =  document.createElement("<INPUT TYPE='text' value='' size='10' maxlength='10' name='sub_ledger"+ledger_type+"[]' class='textfield1' id='addMsgRow"+row.id+"SubLedger' onChange='checkPostingEditCode(\"messagesTable\", \"addMsgRow"+row.id+"\");checkSubledger(\"addMsgRow"+row.id+"SubLedgerMsg\", this.value, document.getElementById(\"addMsgRow"+row.id+"SubType\").options[document.getElementById(\"addMsgRow"+row.id+"SubType\").selectedIndex].value, \"addMsgRow"+row.id+"SubLedger\", \"addMsgRow"+row.id+"SubType\",\""+ledger_type_label+"\");'>");
    //cell4.width="90";
    //cell4.valign="top"
    cell4.appendChild(inp4);
 
    var cell5 = document.createElement('<TD valign="top">');
    var objSelect =  document.createElement("<SELECT name='sub_type"+ledger_type+"[]' id='addMsgRow"+row.id+"SubType' onChange='checkPostingEditCode(\"messagesTable\", \"addMsgRow"+row.id+"\");checkSubledger(\"addMsgRow"+row.id+"SubLedgerMsg\", document.getElementById(\"addMsgRow"+row.id+"SubLedger\").value, this.options[this.selectedIndex].value, \"addMsgRow"+row.id+"SubLedger\", \"addMsgRow"+row.id+"SubType\",\""+ledger_type_label+"\");'>");
 
    var objOptionDefault = document.createElement("OPTION");
    objOptionDefault.text="-";
    objOptionDefault.value="";
    objSelect.options.add(objOptionDefault);
 
    var objOptionA = document.createElement("OPTION");
    objOptionA.text="A";
    objOptionA.value="A";
    objSelect.options.add(objOptionA);
 
    var objOptionC = document.createElement("OPTION");
    objOptionC.text="C";
    objOptionC.value="C";
    objSelect.options.add(objOptionC);
 
    var objOptionX = document.createElement("OPTION");
    objOptionX.text="X";
    objOptionX.value="X";
    objSelect.options.add(objOptionX);
 
    var link=document.createElement("a");
    link.href="javascript:deleteRow('"+row.id+"', '"+ledger_type_label+"');void(0)";
 
    objSelect.className="textfield2";
    var imageObj=document.createElement("IMG");
    imageObj.src="../../../images/options/minus1.gif";
    imageObj.border="0";
 
    cell5.appendChild(objSelect);
    link.appendChild(imageObj);
    cell5.appendChild(link);
 
    var inp5 =  document.createElement("INPUT");
    inp5.type="hidden";
    inp5.value="";
    inp5.id="addMsgRow"+row.id+"PEC";
    inp5.name="pec[]";
    cell5.appendChild(inp5);
 
    var inp6 =  document.createElement("INPUT");
    inp6.type="hidden";
    inp6.value="no";
    inp6.id="addMsgRow"+row.id+"PECCheck";
    cell5.appendChild(inp6);
    cell5.width="50";
 
    row.appendChild(cell1);
    row.appendChild(cell2);
    row.appendChild(cell3);
    row.appendChild(cell4);
    row.appendChild(cell5);
    tbody.appendChild(row);
}
 

Has anyone else had problems with javascript-inserted content being treated as internet zone instead of trusted zone?

[epots9]

i couldn't find where you're setting the onblur attribute, what part is it and please use javascript code ([code=javascri pt][/code])tags

[loganfoster]

i couldn't find where you're setting the onblur attribute, what part is it and please use javascript code ()tags

My apologies, I meant onChange. I tried testing out onBlur just now to see if I could even get an alert box to fire, which it wouldn't.

Am I not using code tags above? I thought that I was.

[epots9]

your createElement statement it wrong

var inp1 =  document.createElement("<INPUT TYPE='text' value='' size='24' maxlength='24' name='ledger_num"+ledger_type+"[]' class='textfield1' id='textaddMsgRow"+row.id+"' onChange='checkAccountNumber(this.value, \""+neighborhood+"\",\"addMsgRow"+row.id+"\",\""+agent_id+"\",\""+ledger_type_label+"\")'>");
 

try

var inp1 = document.createElement("input");
inp1.type = "text";
inp1.size = "24";
inp1.maxlength = "24";
inp1.name = "ledger_num" + ledger_type + "[]";
inp1.class = "textfield1";
inp1.id = "textaddMsgRow" + row.id;
inp1.onchange = function(){checkAccountNumber(this.value, neighborhood, "addMsgRow" + row.id, agent_id, ledger_type_label);}
 

give that a test and tell us how it goes,

good luck