Can arbitrary html code be inserted into the title field of SAEFs?

Posted: 03 July 2008 12:58 AM

[ Ignore ]

Research Assistant

Total Posts: 596

Joined 12-10-2006

According to the following thread, arbitrary html code can be inserted into the title field of SAEFs.

I just wanted to check if this is still a problem in the latest build/version?

Profile

Posted: 03 July 2008 07:50 AM

[ Ignore ] [ # 1 ]

Moderator

Total Posts: 23528

Joined 05-20-2002

Just tested sticking a <b> in the title and it was stripped, so looks like it.

And just a note- it was always run through the xss filter. Just not stripped of html.

That help?

Signature

AKA rob1

Profile

Posted: 03 July 2008 10:59 AM

[ Ignore ] [ # 2 ]

Research Assistant

Total Posts: 596

Joined 12-10-2006

Thanks Robin

Profile

Posted: 03 July 2008 02:49 PM

[ Ignore ] [ # 3 ]

Moderator

Total Posts: 15380

Joined 05-15-2004

Closing this one out. If anything else comes up, you know where we are

Signature

Everything will be good in the end. If it’s not good, it’s not the end.

Profile

MSG

Username		Remember Me?
Password		forgot password?

Visitor Statistics
The most visitors ever was 1149, on July 16, 2007 09:33 AM
Total Registered Members:	64938	Total Logged-in Users:	53
Total Topics:	81910	Total Anonymous Users:	50
Total Replies:	440318	Total Guests:	299
Total Posts:	522228