I'm trying to call a standard javascript function document.write off of a string read from a cookie.

The web page sets a cookie like so:

document.cookie="document.write('Charles'); expires=Thu, 18 Dec 2014 12:00:00 UTC; path=/";

It then retrieves the cookie like so:

var x = document.cookie;

After this is done the string contained by x=:

"document.write('Charles')"

So there now is the document.write(str) function in the variable x, however the function does not write "Charles" to the web page.

How can I change this so that when the web page reads the cookie, it automatically outputs "Charles" to the body of the web page through the document.write funcion.

Any help or pointers to the answer would be most appreciated.

I don't know how well it works or how's the support in browsers, but with a quick google search I found that you can create Functions with new Function();

http://stackoverflow.com/questions/2573548/given-a-string-describing-a-javascript-function-convert-it-to-a-javascript-func

Look here: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Function

Also, eval() should work too, but from the same quick search it looks like it's not the best method in some cases.

The key is that you can't write any code, since this is going to execute on a third party website.

All you can count on is that the third party site will read the first part of the cookie up untill the first semi colon, and that that read will take place in a <script> tag. Something that you do within that string

had got to effect the way the third party web page displaye its page

I don't think that's possible, you need to convert that text into a function, so you need to write more code. Also, cookies are not meant to be used as code, what you're trying to do sounds bad.