This should not work. html specs claim that if the src
attribute is in the script tag, the contents of <script></script>
should be ignored and only code in src
needs to be executed.
On the other hand, it will gracefully degrade in browsers that understand javascript but are not new enough to support external JS code. If there are such browsers that know, but, generally speaking, the exchange code in your fragment should NOT be executed by any decent modern browser.
Marc b
source share