Thread Rating:
  • 2 Vote(s) - 3 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Not Solved Allowing HTML in posts :O
#1
Not Solved
Hello,

Is it safer to keep the HTML off? Some members asked me to enable it and I refused to do so, also I noticed that huge forums don't allow HTML

So what risks do I take if I allow HTML?

Thanks Smile
Rasmus Lerdorf Wrote:If eval() is the answer, you're almost certainly asking the wrong question. - Rasmus Lerdorf
#2
Not Solved
JS injection for one thing.

Why do they need HTML anyways? You could add a lot of HTML features via MyCode.
-Paul H.

Cogisne lingua latina?


Forum Jump:


Users browsing this thread: 1 Guest(s)