* Leo Simons ([EMAIL PROTECTED]) wrote :
> Thom May wrote:
> >malicious users
>
> huh? Who would that be?
>
planet is a generic codebase, not necessarily just used for trusted lists of
people.
:-)
-T
-
To unsubscribe, e-mail: [E
Probably them DB people. Sketchy crowd ;-)
-Brian
On Feb 9, 2004, at 5:20 PM, Leo Simons wrote:
Thom May wrote:
malicious users
huh? Who would that be?
--
cheers,
- Leo Simons
---
Weblog -- http://leosimons.com/
IoC Co
Thom May wrote:
malicious users
huh? Who would that be?
--
cheers,
- Leo Simons
---
Weblog -- http://leosimons.com/
IoC Component Glue -- http://jicarilla.org/
Articles & Opinions -- http://articles.leosimons.com/
---
On 9 Feb 2004, at 10:04, Brian McCallister wrote:
On Feb 9, 2004, at 9:50 AM, Rodent of Unusual Size wrote:
the style attribute is dangerous?
absolute positioning, maybe.
with color.
I remember somebody (norman walsh?) showing how you can change the
meaning of a page by injecting style that could
On Feb 9, 2004, at 9:50 AM, Rodent of Unusual Size wrote:
the style attribute is dangerous?
absolute positioning, maybe.
-Brian
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Thom May wrote:
> it strips all tags that might allow malicious users to insert problematic
> code.
the style attribute is dangerous?
--
#kenP-)}
Ken Coar, Sanagendamgagwedweinini http://Golux.Com/coar/
Author, developer, opinionist http://Apache-Server.Com/
"Millennium hand and shri
* Rodent of Unusual Size ([EMAIL PROTECTED]) wrote :
> so, how come the aggregator is stripping out 'style=""' attributes?
> it turned '' into '', which
> caused some confusion for someone trying to follow something in one
> of my entries..
it strips all tags that might allow malicious users to ins
so, how come the aggregator is stripping out 'style=""' attributes?
it turned '' into '', which
caused some confusion for someone trying to follow something in one
of my entries..
--
#kenP-)}
Ken Coar, Sanagendamgagwedweinini http://Golux.Com/coar/
Author, developer, opinionist http://A