[thelist] Disabling CSS?

Hendrik Mans hm at netzbiest.de
Sun Feb 11 08:33:11 CST 2001


I wrote:
> I'm currently writing a new version of the site (at
> http://pc5.planetcrap.com), and suddenly realized that people
> have been able
> to do all sorts of nasty stuff by putting CSS instructions into a style=""
> attribute. Here's an example:
>
> http://pc5.planetcrap.com/story.php?id=234&since=981775815#num-37

I've implemented a workaround that removes all occurances of "style" in HTML
tags (pun not intended), but I'd really like something with a little more
style (pun again not intended). Anyone?

Thanks,
Hendrik





More information about the thelist mailing list