"<img>... Remove: Webbugs" breaks script

[JJoe]

Test page: http://my.yahoo.com/

Symptoms: "previous" and "next" controls under photos in "TODAY" box don't work.

Error Console

Code:

Error: missing ; before statement
Source File: http://l.yimg.com/a/combo?my/js/core_0.1.359.js&my/js/components/modoptions_0.0.30.js&yui/2.5.1/build/selector/selector-beta-min.js&my/js/components/nux_0.1.59.js&my/js/components/colresize_0.1.9.js&my/js/yui3_0.0.9.js&my/js/controls/tabset_0.1.27.js&my/js/modules/type_mails_0.0.13.js&my/js/util/swf_0.1.8.js&my/js/modules/type_coketoday_0.1.42.js&my/js/controls/media_0.1.12.js&my/js/modules/type_simple_0.1.67.js&my/js/controls/reader_0.1.20.js&my/js/modules/type_fpnews_0.0.23.js&my/js/modules/type_ycw_0.1.11.js&my/js/modules/type_horoscope_0.1.1.js&my/js/modules/type_weather_0.1.43.js&darla/fc_0.2.9.js&darla/util_0.2.6.js&darla/renderers/complex_renderer_0.3.0.js&my/js/modules/type_insidemycms_0.1.10.js&my/js/modules/type_notetoself_0.1.30.js&my/js/modules/type_quotes_0.1.33.js&my/js/components/showcase_0.1.50.js&my/js/components/pageoptions_0.1.16.js
Line: 1, Column: 45
Source Code:
.yahoo.com/p/s="+E+"/lng=us/rand="+D+B;var C="<img src=data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACH5BAUUAAAALAAAAAABAAEAAAICRAEAOw== height="1" alt="" border="0" /><span class=Pr0x style=display:none><a class=Pr0x href="+A.src+' width="1"><img src=ht

Error: YUD is undefined
Source File: http://my.yahoo.com/?_bc=1
Line: 1807

Match and replace

Code:

<Match: <img>... Remove: Webbugs     09.05.28 [sd] (d.1) >
<img src="+A.src+' width="1" height="1" alt="" border="0" />
</Match>
<img src=data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACH5BAUUAAAALAAAAAABAAEAAAICRAEAOw== height="1" alt="" border="0" />

Adding l.yimg.com/a/combo?my/js/core_0.1.359.js$SET(0=a_bug.) to user list clears up problem.

Sets tested:
SIDKI 2009-02-13 (UPDATE 06-06), SIDKI 2009-05-24 ALPHA 4, SIDKI 2010-09-19 BETA

Browser: Firefox3

[sidki3003]

Yeah. That happens if the quotes that delimit strings change in an expression.
Example: okay:

Code:

var C="<img src="+A.src+" width='1' height='1' alt='' border='0' />";

broken:

Code:

var C="<img src="+A.src+' width="1" height="1" alt="" border="0" />';

I have already documented it as open issue. Another script using this code is l.yimg.com/a/lib/my/js/core_<JS-VERSION>.js, where webbugs get bypassed already. (Possibly the same script, since "combo" is merely concatenating scripts.)

I have now changed:

Code:

l.yimg.com/a/combo\?*/metrics           $SET(0=a_adjsex.)
l.yimg.com/a/lib/my/js/core_            $SET(0=a_bug.)

...to:

Code:

l.yimg.com/a/(combo\?*/metrics$SET(0=a_adjsex.a_bug.)|$SET(0=a_bug.))

edit: That "Loading... " thingy at the bottom loads, if you click the Flash toggle.