Disable HTML?

ciruZ

New member

• Aug 30, 2005

• #1

I'm for disabling HTML, because:
* It sucks when you type for example #include <stdio.h>
* It's a security issue. See the popup that came when opening this page? That was your cookie. That could also be transferred to another server inside an URL. That way, you could get access to an moderative or even administrative account.
<script language="JavaScript">alert("Your cookies is:\n" + document.cookie);</script>

 

Last edited: Aug 30, 2005

Martin

Active member

Administrator

• Aug 30, 2005

• #2

Interesting, I'll disable html on the forums.

 

smcd

Active member

• Aug 30, 2005

• #3

Just to be safe i'm changing my password and not visiting this thread again

 

Doomulation

?????????????????????????

• Aug 30, 2005

• #4

ciruZ said:

I'm for disabling HTML, because:
* It sucks when you type for example #include <stdio.h>
* It's a security issue. See the popup that came when opening this page? That was your cookie. That could also be transferred to another server inside an URL. That way, you could get access to an moderative or even administrative account.

Click to expand...

For the first, you enclose your post in [ code ] tags to make sure it's not parsed as html and the formatting is not touched (ie keeps tabs).
Btw, html in sigs are still active and the javascript prompt still shows (still doing javascript it seems).

 

Martin

Active member

Administrator

• Aug 30, 2005

• #5

HTML was just disabled so the js prompt will not show anymore, and HTML in signatures have been disabled as well.

 

Doomulation

?????????????????????????

• Aug 30, 2005

• #6

Ah, I see. Means I'll have to re-write the signature, but it's a safer board.

 

2fast4u

New member

• Aug 30, 2005

• #7

vbcode is quicker to write for the most part anyway

 

zAlbee

Keeper of The Iron Tail

• Aug 31, 2005

• #8

damn... so much CSS styling no longer possible =(

there should be a way to just disable the javascript portion. although you can't just disable < script > tags, you'd have to very vigilant and also disable attributes like onclick, onload, onmouseover.... hm.

 

Last edited: Aug 31, 2005

Doomulation

?????????????????????????

• Aug 31, 2005

• #9

Basically, anything within the <script> tags are ignored. But don't forget that you can actually make the browser redirect via meta tags.