Quote:
Your listing cannot contain javascript (".cookie", "cookie(", "replace(", IFRAME, META, or includes), cookies or base href.

It's extremely hard to forbid access to certain Javascript facilities textually while allowing access to others. There's just so many ways of referring to things in that language...

Peter