On 9/16/10 3:41 PM, Phillip Jones wrote:
> David E. Ross wrote:
>> On 9/16/10 2:57 PM, Phillip Jones wrote:
>>> Daniel wrote:
>>>> Phillip Jones wrote:
>>>>> Leonidas Jones wrote:
>>>>>> Rich Gray<[email protected]>   wrote:
>>>>>>> Robert Kaiser wrote:
>>>>>>>> ... SeaMonkey 2.0.8 is now available for Windows, Mac, and Linux as
>>>>>>>> a
>>>>>>>> free download from www.seamonkey-project.org.
>>>>>>>> ...
>>>>>>>
>>>>>>> Working fine on Mac (so far...) Sorry, no time to smoketest.
>>>>>>>
>>>>>>> Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.1.13)
>>>>>>> Gecko/20100914 SeaMonkey/2.0.8
>>>>>>
>>>>>> Update also working on Tiger and Leopard.
>>>>>>
>>>>>> Lee
>>>>> I'm passing on this due to the new sanitizer Code I will continue
>>>>> passing it up until its removed or someone comes up with a way to bypass
>>>>> it. No one has the right to babysit me and tell me what I can do. I've
>>>>> been using Netscape Since 3.0.1a Gold. So I've been around the block
>>>>> quite a few years.
>>>>>
>>>>
>>>> Sorry, Phillip, refresh my mind. What do you mean by "sanitizer Code"?
>>>>
>>>> Daniel
>>> Starting with  2.07  they built in a sanitizer code into SM in which I
>>> you belong to a HTML Group that allows sound and movies within the post.
>>> you can go to insert>html and insert it. but after its posted its
>>> removed by default. The developer types are becoming paranoid and almost
>>> dictatorial like with what they want to allow you to do with your own
>>> computer. If people on the other end in the intended group want to see
>>> it or not its their discretion to open it or not.
>>>
>>> Were it not for that ability to test in a Group sound code recently, I
>>> would not have figured out  a way to insert properly in my website. So
>>> until its turned off I am sticking with 2.0.6 untill it physically won't
>>> work. Oh its in the latest version of TB as well.
>>>
>>
>> Are you sure this problem is not caused by filters in the newsgroup
>> servers?
>>
>> Audio and video files embedded in messages travel the Internet as
>> attachments, not inline.  They become inline when received and merged by
>> your E-mail or news client (e.g., Thunderbird, SeaMonkey).  Furthermore,
>> they travel the Internet as binary attachments.  Many newsgroup servers
>> strip away binary attachments.
>>
> here is the actual code when you open about config:
> 
> mailnews.display.html_sanitizer.allowed.tags
> 
> html head title body p br div(lang,title) h1 h2 h3 h4 h5 h6 
> ul(type,compact) ol(type,compact,start) li(type,value) dl dt dd 
> blockquote(type,cite) pre noscript noframes strong em sub sup 
> span(lang,title) acronym(title) abbr(title) del(title,cite,datetime) 
> ins(title,cite,datetime) q(cite) a(href,name,title) 
> img(alt,title,longdesc,src) base(href) area(alt) applet(alt) object(alt) 
> var samp dfn address kbd code cite s strike tt b i table(align) caption 
> tr(align,valign) td(rowspan,colspan,align,valign) 
> th(rowspan,colspan,align,valign) wbr
> 

That is NOT code.  That is merely a preference variable and its
value-string.

Have you analyzed the executable code in SeaMonkey or Thunderbird to see
what it does with the preference variable
mailnews.display.html_sanitizer.allowed.tags?

From <http://www.bucksch.org/1/projects/mozilla/108153/>:
> The idea of the HTML Sanitizer is to reduce incoming HTML 
> to only the harmless structural markup. This reduces the amount
> of code that could be exploited for security/privacy attacks 
> significantly. Thus, we get the advantages of HTML (rich 
> information) without the disadvantages (security/privacy risk,
> sender-defined layout).  

From <http://kb.mozillazine.org/Mail_and_news_settings>:
> mailnews . display.html_sanitizer . allowed_tags 
> If they're not listed [in the value-string, then] 
> View -> Message Body as -> Original HTML strips them 

It's quite simple.  Just do not set [View > Message Body > Original HTML].

-- 

David E. Ross
<http://www.rossde.com/>.

Anyone who thinks government owns a monopoly on inefficient, obstructive
bureaucracy has obviously never worked for a large corporation.
© 1997 by David E. Ross
_______________________________________________
support-seamonkey mailing list
[email protected]
https://lists.mozilla.org/listinfo/support-seamonkey

Reply via email to