Forums » Bugs
script warning
If you write in the subject of a post something like
<script>alert('some text');</script>
an msgbox appears...
i think it could be used for other thigs too, so you guys better fix that....
<script>alert('some text');</script>
an msgbox appears...
i think it could be used for other thigs too, so you guys better fix that....
I tried it, got nuthin'.
What? No it doesn't. If the messageboard allowed HTML subjects there would be an awful lot of them.
sorry for the fuss
i saw something like that happening on an other forum, but i didn't want to test it here, so i downloaded the page source an manualy changed a topic titel to <script>....</script> and it worked, so i thought to give you a warning
i saw something like that happening on an other forum, but i didn't want to test it here, so i downloaded the page source an manualy changed a topic titel to <script>....</script> and it worked, so i thought to give you a warning
Well, heh. If you insert your own HTML in the page source, of course it'll work. A long, long time ago you could put HTML in the subject lines but I fixed that fairly quickly after it was discovered.