Can arbitrary html code be inserted into the title field of SAEFs?

Posted: 03 July 2008 01:58 AM

[ Ignore ]

Research Assistant

Total Posts: 576

Joined 12-10-2006

According to the following thread, arbitrary html code can be inserted into the title field of SAEFs.

I just wanted to check if this is still a problem in the latest build/version?

Profile

Posted: 03 July 2008 08:50 AM

[ Ignore ] [ # 1 ]

Moderator

Total Posts: 22382

Joined 05-20-2002

Just tested sticking a <b> in the title and it was stripped, so looks like it.

And just a note- it was always run through the xss filter. Just not stripped of html.

That help?

Signature

AKA rob1

Profile

Posted: 03 July 2008 11:59 AM

[ Ignore ] [ # 2 ]

Research Assistant

Total Posts: 576

Joined 12-10-2006

Thanks Robin

Profile

Posted: 03 July 2008 03:49 PM

[ Ignore ] [ # 3 ]

Moderator

Total Posts: 14066

Joined 05-15-2004

Closing this one out. If anything else comes up, you know where we are

Signature

Everything will be good in the end. If it’s not good, it’s not the end.

Profile

MSG

Username		Remember Me?
Password		forgot password?

Visitor Statistics
The most visitors ever was 1149, on July 16, 2007 10:33 AM
Total Registered Members:	62686	Total Logged-in Users:	47
Total Topics:	77253	Total Anonymous Users:	26
Total Replies:	417024	Total Guests:	249
Total Posts:	494277