This is why WordPress.com strips Javascript from posts. The potential for devilment is limitless without filtering!
Look what I found today!
This is why WordPress.com strips Javascript from posts. The potential for devilment is limitless without filtering!
Holy Shmoly! is Stephen Fry proof thanks to caching by WP Super Cache
3 Comments
Dotan Dimet (1 comments.) on October 27, 2005 at 4:20 pm.
The potential for devilment is pretty high even with filtering, it seems: MySpace are also pretty vigorous in removing Javascript from any text entered by the user. It’s worth reading the description of how the specific exploit was done over here: http://namb.la/popular/tech.html and asking yourself if something like that could get past your own (or Worpress’) filters.
Donncha (1707 comments.) on October 28, 2005 at 1:56 pm.
Thanks Dotan, that made for a scary read!
omfg click here (1 comments.) on November 28, 2005 at 7:47 pm.
holy pj i fucking adore u