(request) Alert Mod
#1
Hello. I'm wondering if someone could make a mod to accept the word 'alert' in the url, because MyBB's new version does more harm than good by blocking this.

Example(if BBC is on):
Test1
<a href="http://alertgames.com">Test</a>

Thanks in advance for a mod or info. Smile
Reply
#2
anyone? Sad
Reply
#3
I don't understand why is alert not working?
Reply
#4
labrocca Wrote:I don't understand why is alert not working?

my forum is currently not working, but i would guess that it is a security feture to block javascrpt
Reply
#5
Yes. If you unblock the word alert, you'll have XSS hackers swarming your site....
Reply
#6
well, could there at least be a way to make it work with the url BBC? Maybie check fo something else with the 'alert' to tell the difference between a site and something else?
Reply
#7
Ok..I read up on XSS..wouldn't it be better to filter <script> or "alert(" from post messages? That's really where the danger lies anyways. I think "alert(" should be filtered and make sure to ignore white space.
Reply
#8
Is it possible to do this? (to tell you the truth, I haven't downloaded MyBB yet, I believe I will very soon. I am a member of a couple MyBB boards however)
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)